Chapter 7 - Managing Risk What Is A Risk?
Chapter 7 - Managing Risk What Is A Risk?
What is a risk?
● An uncertain or chance event that planning cannot overcome or control
● Things that are never supposed to happen always do!
Risk Management Process:
● A proactive attempt to recognize and manage internal events and external threats that
affect the likelihood of a project’s success
○ What can go wrong?
○ How to minimize the risk event impact (consequences)
○ What can be done before an event occurs (anticipation)
○ What to do when an event occurs (contingency plans)
Risk Management’s Benefits:
● A proactive rather than reactive approach
● Reduces surprises and negative consequences
● Prepares the project manager to take advantage of appropriate risks
● Provides better control over the future
● Improves chances of reaching project performance objectives within budget and on
time
The Risk Management Process:
● Step 1 - Risk Identification: Analyze the project to identify sources of risk
○ Generate a list of possible risks through brainstorming, problem identification,
and risk profiling
■ Macro risks first, then specific events
● Step 2 - Risk Assessment: Assess risks in terms of Severity of impact, Likelihood of
occurring, Controllability
○ Scenario analysis for event probability and impact
○ Risk assessment matrix
○ Failure Mode and Effects Analysis (FMEA)
■ Impact x Probability x Detection = Risk Value
● Step 3 - Risk Response Development: Develop a strategy to reduce possible damage,
Develop contingency plans
○ Mitigating Risk
■ Reducing the likelihood an adverse event will occur
■ Reducing impact of adverse event
○ Avoiding Risk
■ Changing the project plan to eliminate the risk or condition
○ Transferring Risk
■ Paying a premium to pass the risk to another party
■ Requiring Build-Own-Operate-Transfer (BOOT) provisions
○ Retaining Risk
■ Making a conscious decision to accept the risk
Step 4 - Risk Response Control: Implement risk strategy, Monitor and adjust plan for
new risks, Change management
○ Risk Control
■ Execution of the risk response strategy
■ Monitoring of triggering events
■ Initiating contingency plans
■ Watching for new risks
○ Establishing a Change Management System
■ Monitoring, tracking, and reporting risk
■ Fostering an open organization environment
■ Repeating risk identification/assessment exercises
■ Assigning and documenting responsibility for managing risk