A method for the evaluation of risk in IT projects · Study