Understanding internally generated risks in projects

This paper identifies a class of risk that is common, important and yet poorly managed in projects. Internally generated risks arise within a project management team or its host organisation, from their management systems, culture and decisions. Even when a project applies recognised risk management processes, and seems to be managing its risks well, research demonstrates that internally generated risks are a different matter altogether. This calls into question how such risks can be managed, and whether current risk management practices need to be changed.