Because learning changes everything.

Chapter Seven
Managing Risk

© 2021 McGraw-Hill Education. All rights reserved. Authorized only for instructor use in the classroom.
No reproduction or further distribution permitted without the prior written consent of McGraw-Hill Education.
 Where We Are Now

© McGraw-Hill Education 2
 Learning Objectives

07-01 Describe the risk management process.

07-02 Understand how to identify project risks.
07-03 Assess the significance of different project risks.
07-04 Describe the five responses to managing risks.
07-05 Understand the role contingency plans play in the risk management
process.
07-06 Understand opportunity management and describe the five
approaches to responding to opportunities in a project.
07-07 Understand how contingency funds and time buffers are used to
manage risks on a project.
07-08 Recognize the need for risk management being an ongoing activity.
07-09 Describe the change control process.

© McGraw-Hill Education 3
 Chapter Outline

7.1 Risk Management Process

7.2 Step 1: Risk Identification
7.3 Step 2: Risk Assessment
7.4 Step 3: Risk Response Development
7.5 Contingency Planning
7.6 Opportunity Management
7.7 Contingency Funding and Time Buffers
7.8 Step 4: Risk Response Control
7.9 Change Control Management

© McGraw-Hill Education 4
 7.1 Risk Management Process

Risk Defined
- An uncertain event or condition that if it occurs, has a positive or
negative effect on project objectives.
- No amount of planning can overcome or control risk.
Risk Management Defined
- An attempt to recognize and manage potential and unforeseen trouble
spots that may occur when the project is implemented.
• What can go wrong (risk event)
• How to minimize the risk event’s impact (consequences)
• What can be done before an event occurs (anticipation)
• What to do when an event occurs (contingency plans)

© McGraw-Hill Education 5
 Risk Event Graph

© McGraw-Hill Education FIGURE 7.1 6

 Benefits of Risk Management

- A proactive rather than reactive approach

- Reduces surprises and negative consequences
- Prepares the project manager to take appropriate action
- Provides better control over the future
- Improves chances of reaching project objectives on time, within
budget, and of meeting required performance.

© McGraw-Hill Education 7
 The Risk Management Process

© McGraw-Hill Education FIGURE 7.2 8

 7.2 Step 1: Risk Identification

- Generate a list of all the possible risks that could affect the project
through brainstorming and other problem identifying techniques.
- Focus on the events that could produce consequences, not on project
objectives.
- Use risk breakdown structure (RBS) in conjunction with work
breakdown structure (WBS) to identify and analyze risks.
- Identify the macro risks first then specific areas can be checked.
- Use risk profile (a list of questions) to address traditional areas of
uncertainty on a project.

© McGraw-Hill Education 9
 The Risk Breakdown Structure (RBS)

© McGraw-Hill Education FIGURE 7.3 10

 Partial Risk Profile for Product Development Project

© McGraw-Hill Education FIGURE 7.4 11

 7.3 Step 2: Risk Assessment

Scenario analysis assesses the significance of each risk event in terms of

probability and impact.
Risk assessment form evaluates the severity, probability of risk events and
its detection difficulty.
Risk severity matrix prioritizes which risks to address.
- Failure Mode and Effects Analysis (FMEA) extends the risk severity
matrix by including ease of detection in the equation:
Risk Value = Impact x Probability x Detection
Probability analysis uses statistical techniques in assessing project risk.
- Decision trees, net present value (NPV), program evaluation and review
technique (PERT), PERT simulation

© McGraw-Hill Education 12
 Defined Conditions for Impact Scales of a Risk on Major
Project Objectives (examples for negative impacts only)

© McGraw-Hill Education FIGURE 7.5 13

 Risk Assessment Form

© McGraw-Hill Education FIGURE 7.6 14

 Risk Severity Matrix

Failure Mode and Effects Analysis (FMEA)

Impact × Probability × Detection = Risk Value

User Interface
4 Backlash problems
Likelihood

Red zone (major risk)

3 Yellow zone (moderate risk)
Green zone (minor risk)

System
2
freezing

Hardware
1 malfunc-
tioning

1 2 3 4 5

© McGraw-Hill Education FIGURE 7.7 15

 7.4 Step 3: Risk Response Development

Mitigating Risk
- Reducing the likelihood that the event will occur
- Reducing the impact that the adverse event would have on the project
Avoiding Risk
- Changing the project plan to eliminate the risk or condition
Transferring Risk
- Passing risk to another party
• Examples: Fixed-price contracts, insurance, Build-Own-Operate-
Transfer (BOOT) provisions
Escalating Risk
- Notifying the appropriate people within the organization of the threat
Retaining Risk
- Making a conscious decision to accept the risk of an event occurring
© McGraw-Hill Education 16
 7.5 Contingency Planning

Contingency Plan Defined

- Is an alternative plan that will be used if a possible foreseen risk event
becomes a reality.
- Is a plan of action that will reduce or mitigate the negative impact of the
risk event.
- Is not a part of the initial implementation plan and only goes into effect
after the risk is recognized.
Risks of the absence of a contingency plan
- Cause a manager to delay or postpone the decision to implement a
remedy
- Lead to panic and acceptance of the first remedy suggested
- Make the decision making under pressure which can be dangerous and
costly
© McGraw-Hill Education 17
© McGraw-Hill Education Source: https://www.dw.com/en/project-possible-nirmal-purja-conquers-all-14-eight-thousand-meter-peaks/a-50949010 18
 Ed Viesturs on climbing Annapurna

Image Source 1:https://www.rockandice.com/people/ed-viesturs-what-ive-learned/

Image source 2: https://skyaboveus.com/climbing-hiking/Annapurna-Why-is-It-Known-as-the-Worlds-Deadliest-Mountain

© McGraw-Hill Education 19
 Risk Response Matrix

© McGraw-Hill Education FIGURE 7.8 20

 Risk and Contingency Planning

Technical Risks
- Backup strategies if chosen technology fails
- Assess whether technical uncertainties can be resolved
Schedule Risks
- Expedite or “crash” the project to get it back on track
- Schedule activities in parallel or use start-to-start lag relationships
- Use the best people for high-risk tasks
Cost Risks
- Review price to avoid the trap of using one lump sum to cover price
risks
Funding Risks
- Evaluate the risk of reductions in funding—a cut in the project

© McGraw-Hill Education 21
 7.6 Opportunity Management

An opportunity is an event that can have positive impact on project objectives.

Exploit
- Seek to eliminate the uncertainty associated with an opportunity to ensure that it
definitely happens
Share
- Allocate some or all of the ownership of an opportunity to another party who is
best able to capture the opportunity for the benefit of the project
Enhance
- Take action to increase the probability and/or the positive impact of an opportunity
Escalate
- Notify the appropriate people within the organization of the opportunity
Accept
- Be willing to take advantage of the opportunity if it occurs, but not taking action to
pursue it
© McGraw-Hill Education 22
 7.7 Contingency Funding

Contingency Funds

- Are funds to cover project risks—identified and unknown

- For control purposes, contingency funds are divided into

• Contingency reserves—cover identified risks and allocated to

specific segments or deliverables of the project

• Management reserves—cover unidentified risks and are allocated

to risks associated with the total project

© McGraw-Hill Education 23
 Budget Estimate

© McGraw-Hill Education TABLE 7.1 24

 Time Buffers

Time buffer is the time contingency used to cushion against potential

delays of a project.

Buffers are added to:

- Activities with severe risks.

- Merge activities that are prone to delays due to preceding activity

delays.

- Noncritical activities to reduce the likelihood of a new critical path

- Activities that require scarce resources

© McGraw-Hill Education TABLE 7.1 25

 7.8 Step 4: Risk Response Control

Risk Register
- Details all identified risks, including descriptions, category, probability of occurring,
impact, responses, contingency plans, owners, and current status
Risk Control involves
- Executing the risk response strategy
- Monitoring triggering events
- Initiating contingency plans
- Watching for new risks
Establishing a Change Management System
- Monitoring, tracking, and reporting risk
- Fostering an open organization environment
- Repeating risk identification/assessment exercises
- Assigning and documenting responsibility for managing risk

© McGraw-Hill Education 26
 7.9 Change Control Management

Sources of Change
- Project scope changes
- Implementation of contingency plans
- Improvement changes
Change Management Systems
1. Identify proposed changes
2. List expected effects of proposed change(s) on schedule and budget
3. Review, evaluate, and approve or disapprove of changes formally
4. Negotiate and resolve conflicts of change, condition, and cost
5. Communicate changes to parties affected
6. Assign responsibility for implementing change
7. Adjust master schedule and budget
8. Track all changes that are to be implemented

© McGraw-Hill Education 27
 Change Control Process

© McGraw-Hill Education FIGURE 7.9 28

 Benefits of Change Control Systems

1. Inconsequential changes are discouraged by the formal process.

2. Costs of changes are maintained in a log.
3. Integrity of the WBS and performance measures is maintained.
4. Allocation and use of contingency and management reserves are
tracked.
5. Responsibility for implementation is clarified.
6. Effect of changes is visible to all parties involved.
7. Implementation of change is monitored.
8. Scope changes will be quickly reflected in baseline and performance
measures.

© McGraw-Hill Education 29
 Sample Change Request

© McGraw-Hill Education FIGURE 7.10 30

 Change Request Log

© McGraw-Hill Education FIGURE 7.11 31

 Key Terms

Avoiding risk Risk

Change management system Risk breakdown structure (RBS)
Contingency plan Risk profile
Contingency reserves Risk register
Escalating risk Risk severity matrix
Management reserves Scenario analysis
Mitigating risk Time buffer
Opportunity Transferring risk
Retaining risk

© McGraw-Hill Education 32
Because learning changes everything. ®

www.mheducation.com

© 2021 McGraw-Hill Education. All rights reserved. Authorized only for instructor use in the classroom.
No reproduction or further distribution permitted without the prior written consent of McGraw-Hill Education.