As spending on IT rises steeply, organizations become increasingly technology-dependent and, consequently, they become highly vulnerable to the risks of IT failure. The latest report on the failure of many complex IT projects to deliver key benefits on time and to target cost and specification was published jointly by the Royal Academy of Engineering and the British Computer Society. One of the key findings is that ‘‘risk management is critical to success in complex projects but is seldom applied effectively in the case of IT and software’’. On the other hand, Recent developments in global commerce have witnessed the advent of the virtual enterprise. Groups of companies are forming short-term relationships to collaborate on one-off projects. A VE face more risks than a stand-alone enterprise. Many factors, such as delivery performance, price and demand, etc., can cause risks.