Information technologies (IT) and information systems (IS) are the backbone of any developed business, and organizations without them cannot compete. In recent decades, many best practices standards, and guides have been made available to project managers and organizations aimed to improve project management. Unfortunately, IS projects continue to show a poor track record, and problems related to project management performance persists. Risk management has a vital role in this context since it can increase the likelihood and impact of positive events, and decrease the likelihood and impact of adverse events in the project. This article presents the results of an international web-based survey, studying if risk management processes are being implemented consistently in IS project management. The obtained results show low levels of risk management processes implementation and reinforce the idea that “it can be risky not to do risk management,” demanding more research in this area.