Abstract
We put the great importance on the risk management process among project management. We picked up risks which were occurred in the cases of many IT projects, and we studied them from the various aspects. We found out proactive risk management could be conducted by analyzing the "Causation among risks" of knowledge areas which is not described in PMBOK. Furthermore, we found out new risks (named "Derivation risks") may be identified as a result of implementing risk response plan, and that helps the realization of more effective risk monitoring and control. In this paper, we created "Proactive Risk Evaluation Tool (PRET) " and, we suggest the effective risk management process to be used on actual business which is considered the relationship between "Causation among risks" and "Derivation risks" as the first step of the new risk management techniques.