Recent experience suggests that many reengineering efforts fail, and that they fail for reasons unrelated to the technical ability of organizations to implement information systems. Our research suggests that the two principal reasons for failure are functionality risk and political risk, respectively, the organization's inability to understand its uncertain future strategic needs, and its inability to make painful and difficult changes in response to these future strategic needs. Recent research in the organizational change literature suggests that these risks are the result of conflict among the organization's current strategy, its espoused degree of change, the actually accepted and generally smaller degree of change, and the generally larger degree of change that would be in some sense optimal. Moreover, the conflicts among these may be unperceived or undiscussable within the organization, exacerbating the risks. We summarize in a few testable hypotheses our experience with managing the risks of reengineering, and use a small set of representative case studies to examine these hypotheses informally.