A process of risk management in projects is a rational chain of practices by which decision-agents plan and execute actions
and control the results in order to keep the implementation of the project under certain conditions (time, cost and quality
parameters’ set). With the purpose of providing guidelines for the selection of the best practices taking into account the
organizational maturity and project complexity, a theoretical framework to classify and associate those practices to each
phase of the project life cycle and to each project risk management process is proposed. Future research efforts will be
directed towards refining the framework and testing it in multiple case studies.