A GAO review of 53 major federal IT modernization projects found that 24 carried more risk than agencies' CIO ratings showed, while 27 matched and two overstated risk. The article argues agencies need stronger risk assessment and mitigation, citing behavioral research on optimism and loss aversion.