Failures of super large projects like IT Upgrade of Shinhan Financial Group can be a heavy blow not only to the company but even to the national economy. Research on the practices of risk management in those projects will provide invaluable lessons, enhancing capabilities and chances of successfully executing mission critical projects of the companies and the national economy as a whole. This paper analyzes the risk management of the Core Systems Reconstruction which was the most critical component of IT Upgrade. The analysis covers risk management plans, and identification and evolution, and control and monitoring of risk factors. This study confirms the major results of previous research on risk management in Korea. However, the analysis found as well some discrepancies of practices from the previous research results. This research also tracked the trajectories of evolution of risk factors and management. In particular, in depth analysis of control and monitoring is the first research in Korea on the "management" of risks in IT projects. The result of this research is expected to be a useful guide for theory development and practices of risk management in the future.