Chapter 11 Flashcards
what is project risk management?
- process of conducting risk management planning, identification, analysis, response planning and monitoring and conrol on a project
what are the objectives of Project Risk Management?
- increase probability and impact of positive events, decrease probability and impact of negative events
what are the processes to Project Risk Management?
- 1 plan risk management
- 2 identify risks
- 3 perform qualitative risk analysis
- 4 perform quantitative risk analysis
- 5 plan risk responses
- 6 monitor and control risks
what is risk?
an uncertain event or condition that has an effect on at least one project objective if it occurs
what are objectives?
- can include scope, schedule, cost and quality
what is a cause?
- a requirement, assumption, constraint or condition that creates the possibility of negative or positive outcomes
what are risk conditions?
- aspects of the project/org’s environment that may contribute to project risk
- ex. immature project management practices, lack of integrated management systems, concurrent multiple projects, dependencies on external participants who can’t be controlled
what are known risks?
- those that have been identified and analyzed, making it possible to plan responses to those risks
what are unknown risks
- cannot be managed proactively. should create a contingency plan
what steps does an org need to make to be successful in handling risk?
- committed to address risk management proactively and consistently throughout the project
- conscious choice to actively identify and pursue effective risk management during the life of the project
what is the Plan Risk Management process?
- process of defining how to conduct risk management activities for a project
- should be completed early during project planning
why is the Plan Risk Management process important?
- ensures that the degree, type, and visibility of risk management are commensurate with the risks and the importance of the project to the org
- provides sufficient resources and time for risk management activities and to establish an agreed-upon basis for evaluating risks
what are the inputs to the Plan Risk Management process?
- project scope statement
- cost management plan
- schedule management plan
- communications management plan
- enterprise environmental factors
- organizational process assets
what are the tools and techniques to the Plan Risk Management process?
- planning meetings and analysis
what are the outputs to the Plan Risk Management process
- risk management plan
how is the project scope statement an input to the Plan Risk Management process?
- provides a clear sense of the range of possibilities associated with the project and establishes the framework for how significant risk management may become
how is the cost management plan an input to the the Plan Risk Management process?
- defines how risk budgets, contingencies and management reserves will be reported and accessed
how is the schedule management plan an input to the Plan Risk Management process?
- defines how schedule contingencies will be reported and assessed
how is the communications management plan an input to the Plan Risk Management process?
- defines interactions that will occur on the project and determines who’s available to share info on risks and responses at different times and locations
what enterprise environmental factors can influence the the Plan Risk Management process?
- risk attitudes and tolerances that describe the degree of risk that the org will withstand
what organizational process assets can influence the Plan Risk Management process?
- risk categories
- common definitions of concepts and terms
- risk statement formats
- standard templates
- roles and responsibilities
- authority levels for decision making
- lessons learned
- stakeholder registers
how are planning meetings and analysis a tool & technique for the Plan Risk Management process?
- planning meetings of PM, team members, stakeholders, etc held to develop risk management plan
- high level plans for conducting risk management activities are defined in these meetings
- risk management cost and schedule activities established
- risk management responsibilities assigned
- org templates for risk tailored to the project
- outputs of these meetings summarized in risk management plan
what goes in the risk management plan after the Plan Risk Management process?
- describes how risk management will be structured and performed on the project
includes
- methodology: approches, tools and data sources that may be used to perform risk management
- roles and responsibilities: defines the lead, support and risk management team members for each type of activity in the risk management plan
- budgeting: resources and funds needed for risk management to be included in the cost performance baseline, and establishes protocols for applying the contingency reserve
- timing: defines when and how often risk management process will be performed throughout the project and establishes protocols for applying schedule of contingency reserves
- risk categories: provies structure that ensures a comprehensive process of systematically identifying risks to a consistent level of detils (ex. a Risk Breakdown Structure – RBS)
- definitions of risk probability and impact: general definitions of probability and impact levels are tailored to the project
- probability and impact matrix: table with specific combinations of probability and impact that lead a risk to be rated high/med/low
- revised stakeholders; tolerances
- reporting formats: how outcomes of the risk management processes will be documented, analyzed and communicated
- tracking: hor risk activities will be recorded for the current project and future needs
what is the Identify Risks process?
- process of determining which risks may affect the project and documenting their characteristics
- participants can include PM, team members, risk management team, customers, subject matter experts, end users, other PMs, stake holders, risk management experts
why should the Identify Risks process involve the project team?
- so they can develop and maintain a sense of ownership and responsibility for the risks and associated risk response actions
what are the inputs to the Identify Risks process?
- risk management plan
- activity cost estimates
- activity duration estimates
- scope baseline
- stakeholder register
- cost management plan
- schedule management plan
- quality management plan
- project documents
- enterprise environmental factors
- organizational process assets
what are the tools & techniques of the Identify Risks process?
- documentation reviews
- information gathering techniques
- checklist analysis
- assumptions analysis
- diagramming techniques
- SWOT analysis
- expert judgment
what are the outputs of the Identify Risks process?
- risk register
how is the risk management plan an input to the Identify Risks process?
- assignments of roles and responsibilities, provision for risk management activities in the budget and schedule, and categories of risk are key inputs from the risk management plan to the Identify Risks process
how are activity cost estimates an input to the Identify Risks process
- reviewing activity cost estimates helps identifies risk as they provide a quantitative assessment of the likely cost to complete scheduled activities and are ideally expressed as a range with the width of the range indicating the degree of risk
- can determine if the estimate is sufficient to complete the activity
how are activity duration estimates an input to the Identify Risks process?
- reviews of this helps identify risks related to time allowances for activities and the project as a whole
how isthe scope baseline an input to the Identify Risks process?
- assumptions found in the project scope statement should be evaluated as potential causes of risk
- WBS is a critical input to identifying risks as it facilitates an understanding of the potential risks at the micro and macro level
how is the stakeholder register an input to the Identify Risks process?
- ensures the key stakeholders are interviewed/participate in the Identify Risks process
how is the cost management plan an input to the Identify Risks process
- project-specific approach to cost management may generate/alleviate risk
how is the schedule management plan an input to the Identify Risks process?
- need to understand the schedule management plan because the project-specific approach to schedule management may generate/alleviate risk
how is the quality management plan an input to the Identify Risks process?
- project-specific approach to quality management may generate/alleviate risk
what project documents are inputs to the Identify Risks process?
include
- assumptions log
- work performance reports
- earned value reports
- network diagrams
- baselines
- other project info
what enterprise environmental factors can influence the Identify Risks process?
- published info like commercial databases
- academic studies
- published checklists
- benchmarking
- industry studies
- risk attitudes
what organizational process assets can influence the Identify Risks process?
- project files
- org and project process controls
- risk statement templates
- lessons learned
how are documentation reviews used in the Identify Risks process?
- structured reviews of document
- quality of the plans and consistency between the plans and the project requirements and assumptions can be indicators of risk in the project
what are some information gathering techniques used to identify risks?
- brainstorming
- delphi technique
- interviewing
- root cause analysis
how is brainstorming used in the Identify Risks process?
- obtain a comprehensive list of risks from experts
- categories of risk (ex. RBS) can be used as a framework
- risks are identified and categorized
how is the Delphi technique used in the Identify Risks process?
- use questionnaire to solicit ideas about project risks from experts anonymously
- responses summarized and recirculated for another round until consensus is reached
how is interviewing used in the Identify Risks process?
- interview experienced project participants, stakeholders, and subject matter experts
how is root cause analysis used in the Identify Risks process?
- specific technique to identify a problem, discover the underlying causes that lead to it and develop preventive action
how is checklist analysis used in the Identify Risks process?
- risk identification checklists can be developed based on historical informaiton and knowledge from past projects
- lowest level of RBS can also be used as a risk checklist
- checklist is not exhaustive
how is assumptions analysis used in the Identify Risks process?
- explores the validity of assumptions as they apply to the project
- identifies risks to the project from inaccuracy, instability, inconsistency or incompleteness of assumptions
what diagramming techniques are used in the Identify Risks process?
- cause & effect diagrams (Ishikawa/fishbone diagrams)
- system or process flow charts
- influence diagrams: shows causal influences, time ordering of events and other relationships
how is a SWOT analysis used in the Identify Risks process?
- increases the breadth of identified risks
how is expert judgment used in the Identify Risks process?
- risks identified by experts with experience in similar projects/business areas
- experts’ bias should be taken into account
what are the main outputs from the Identify Risks process?
initial entries into the risk register, which contains the outcomes of the other risk management processes
includes
- list of identified risks (with root causes and details)
- list of potential responses
what is Perform Qualitative Analysis?
- process of prioritizing risks for further analysis/action by assessing and combining their probability of occurrence and impact on project
- reflects the attitude of the team and stakeholders to risk
- rapid, cost-effective way to establish priorities for Plan Risk Responses and lays the foundation for Perform Quantitative Risk ANalysis if needed