 Project risks focus on budget, timeline and system quality.Application risks focus on performance and overall system capacity.Information asset risks focus on the damage, loss or disclosure to an unauthorized part of information assets.