organisations realise the benefits that risk management has to offer to improve project performance and success (Teller, 2013). Thus, one of the core competencies of these organisations is an effectual and comprehensive risk management system, as postulated by Hung (2012). Risk management has been regarded as the yardstick for evaluating good control for a wide range of organisations, according to the seminal work by Power (2007).