Fig. 3 shows both risk management approaches combined. The evaluation approach assumes that known risk factors are used in the current project, contributing to the management of the project and as a result to positive project outcomes. This is indicated with the arrow labeled ‘‘use is assumed”, because the publications reviewed in this paper provide no indications that the relation between project success and the actual use of knowledge on risk factors has been investigated.