Hundreds of IT projects deemed ‘at risk’