Since the attacks of Sept. 11, companies around the world started to value and adopt the process of risk management in their operations. Models and frameworks have been created and enhanced with focus in risk. Successive studies have been published about the failure in software projects where the percentage has remained high. One of the reasons for the failures are directed to cases of non-adoption of systemic processes in their activities. Begin to identify, analyze, assess and treat risks systematically is not an obvious task. Specifically in small companies, where financial and human resources are limited, the difficulty in introducing new processes is even greater. To contribute to these software projects, this work presents the activities of a risk management process, in order to insert the culture and capacity of professionals who work in such projects, can objectively target to the mitigation of risks into which such projects are exposed.