IT project risk management case analysis