from http://resources.infosecinstitute.com/risk-management-agile/

Does Agile’s approach to project management in fact endanger the safety of an organization’s projects?Agile was created in order to deal with high-risk projects. There are three main types of risks from the investor’s perspective, and insist that they must be mastered fairly quickly.

• Risk of delivery – the project may not be delivered on time, at a given budget and quality.
• Risk of business value – the project may have no value.
• Risk to the business model – that the project may hurt the existing organization of work.