Outsourcing IT projects can be risky, leading to failure if not managed properly. A conceptual framework was developed to help manage risks in IT outsourcing projects. The framework outlines the process of risk management and principles to follow at each phase of the project. A questionnaire was used to validate the framework, showing that not practicing risk management can result in poor control and management of IT outsourcing projects. Future research will focus on developing a more detailed risk management framework for IT outsourcing.