Abstract
In our previous report, we suggested the proactive risk management process which could be identified project risks at the earlier phase by paying attention to the "Causation among risks". However, some risks that it was not considered the project situation of a certain point were identified from the actual IT-project. We improved a risk management process that is focused on the task group of the task network that might give a project the biggest influence of the risk management, and thought precision of the risk identification and risk analysis can be improved by considering "Project risk policy" (priority of QCD) which continuously changed with the progress of the project. According to CCPM (Critical Chain Project Management), it is the task on the critical chain of the task network, which might give a project the biggest influence, and the project risk can be forecasted by buffer and so on. In this report, we expand our proactive risk management process, and we suggest the innovative risk management process that can identify and analyze more precious risks by considering the risk value on changing "Project risk policy" and the buffer influenced by these risk values.