Abstract
Although the terminology "Risk Management" is often used in various phases of IT solution projects recently, there are gaps between knowledge of Risk Management like knowledge area of PMBOK and actual cases of project performance. And the gaps are not always bridged. In this paper, how to bridge the gaps is presented by matters for discussion using actual experiences in IT system development.