This report analyses the relationship between risk management and the success of software development projects. The report studies the integrity of the knowledge that risk management is based upon. The analysis is is supported by two case studies.