Abstract: Disclosed is a risk-based project management system. The risk-based project management system typically includes a processor, a memory, and a program module stored in the memory. During the planning phase of a project, the program and project management system is typically configured for: prompting a first user to provide inherent risk information regarding the project, receiving inherent risk information regarding the project; and based on the received inherent project risk information, calculating an inherent project risk score. During the execution phase of a project, the program and project management system is typically configured for receiving residual risk information regarding the project and, based on the received residual project risk information, calculating a residual project risk score.