Abstract Secure software project management comprises the steps that should be taken by software producers in their quest to provide good software to the market. Software production is a very challenging bit in information technology due to the nature of computer software that can be produced to do different functions. The need to come up with secure projects for software project management has been necessitated by the fact that the software has become a very integral part of the present-day society due to dependence by the society on computers to run different functions. The use of computers in the day-to-day running of activities has therefore called for the setting up of standards that will guarantee aspects such as security of the software by ensuring that ethical elements of the software production process are followed in an attempt to achieve a sustainable production of better and improved software over time. This therefore calls for a concerted effort between all stakeholders in the industry as a way of coming up with the best standards that can be followed during software production. With this light in mind, the question, ‘what role should stakeholders play to guarantee software security and hence information assurance?’ forms the basis of argument of this paper. Project Risk Management The evident technological advancement is the primary cause of the many incidences of computer insecurity. Hackers have managed to take advantage of the technology to crack into the information banks of other parties without the parties’ consent to perform malicious acts. During software development, several risks are involved, thus calling for all stakeholders to develop strategies to manage the risk for the project to be successful. Some risks can be easily identified while others may not, or may never be identified because of the complex nature of software development use and management that makes it multifaceted when it comes to managing the risks involved. Therefore, as highlighted in the next section, the involved parties need to be aware of the role of project risk management in a bid to implement the various risk handling steps in the computer sector as a strategy of guaranteeing security of information that is shared among people and/or organizations. The diagram below shows the steps that they can use for an effective risk management process. Risk Assessment Risk assessment is the first step in managing risks. It involves finding out the possible risks that the given project might face during its development and execution. During this stage, the risk threats to the project are usually highlighted with regard to the purpose that the software is going to serve. Different types of software attract different kinds of interests from players in the industry. Therefore, software serving very sensitive and lucrative purposes attracts a lot of attention from groups such as hackers (Otniel, 2013, p. 88). Steps can only be taken after the risk has been identified. The next stage involves identifying the risks that can be handled by the persons preparing the software along with the ones that cannot be handled. The complexity of software development indicates that different software developers have different abilities and hen