There is disclosed an integrated project management and risk management system. A risk processor has access to a project data store containing a plurality of inter-related project actions used for project management purposes, and a risk data store which contains a plurality of inter-related project activities and associated risk indicators used for related risk management purposes. The risk processor is operable to generate and write to the risk data store changes to the project activities and risk indicators reflecting changes in the project actions, to generate or receive mitigating activities identified to reduce or prevent a risk or the consequences of a risk associated with a project activity and to write corresponding project action changes to the project data store.