Following the adoption of probabilistic risk assessment (PRA), which has traditionally been applied to the risk assessment of physical systems like nuclear power plants, chemical plants, railroad facilities, and so on, to information security, this study attempts to apply PRA to project management (PM). This paper discusses the quantitative risk assessment by PRA, especially focusing on the case in which cost planning of a project collapsed.
