A new method of software project risk mangement is presented, which uses the Bayesian networks to infer the probability of risk occurrence and the impact of risk simultaneously. The method can assess risks continuously and take proper measures to respond to risks during software project. Practice proves that by introducing this method into software development process, project risks will be well-managed and project success rate will be improved.