Managing Project Week 5: Risk Flashcards
What processes do risk management processes include?
- Plan risk management
- Identify risks
- Perform risk analysis (qualitative or quantitative)
- Plan risk responses
- Implement risk responses
Monitor risks
the process of defining how to conduct risk management activities for a project.
Risk management plan
- Describe how you developed your risk management plan in past tense
- Give an overview of how you will manage project risks and issues after the project plan is approved (future tense), such as continuous risk management throughout the project, discuss risks at status meetings, use the risk and issue register, with status reports
What is the difference between issues and risks?
Risk: may happen, may = probability a risk may occur, probability could be high of 77% the risk may occur
Issue: is a risk that has occurred or will occur; 100% probability the project risk will be realized = issue
process of identifying individual project risks as well as sources of overall project risk, and documenting their characteristics
Identify risks
- Risk can be internal and external, it can be categorised according to their type and who they influence.
- A risk register (output) is one method that is now commonly used to categorise risk
- Risk and issue identification needs to be continuous, and all team members should be risk aware and actively identify risks
- Two key identification approaches:
3.1 general, where risk can be identified by casual conversation and questions.
3.2 focused, such as looking at risk associated with critical path, budget, phases, deliverable,
milestones etc
Risk analysis involve which two key elements?
1.Analyse probability of risk occurrence
2. Analyse impact should the risk occur
Output: project documents updates
What are the two types of risk analysis?
- Qualitative (high-medium-low)
- Quantitative (rarely required)
Risk analysis: Qualitative risk analysis
Qualitative risk analysis relies on expert judgment to assess probability and impact.
Most common analysis is to rank probability of occurrence and impact as: High, medium and low
Risk analysis: Quantitative risk analysis
process of numerically analyzing the combined effect of identified individual project risks and other sources of uncertainty on overall project objective so on many projects this level of analysis may not be justifiable, and a more qualitative approach is sufficient
quantitative techniques may be deterministic (scenarios) or probabilistic(statistical)
Risk Management Workshop Process (5 processes) for Risk Analysis
- Stakeholders write 2-3 risks on their yellow stickies
- Assess the impact and probability (H-M-L)
- Ask stakeholders what risks they identified,(general and focused approach)
- Place them on a whiteboard or wall
- After analysis and consensus, document in risk register
Plan Risk Response (Risk Treatment)
Plan a response to the risks
(2 ways)
- Prevent - identify actions to prevent the risk from occurring (e.g. accept the risk, purchase insurance, transfer the risk)
- Mitigate - identify actions to reduce the impact of the realized risk event.
2.1 If the risk event occurs, it is considered an issue. The way you treat issues is called an issue resolution plan.
2.2 Usually, you implement the mitigation plan you developed when you identified the risk. The risk mitigation plan may evolve into the issue resolution plan)
Implement Risk Response (3 common steps)
- Implement risk prevention and mitigation, and issues resolution actions
- Update the risk and issue register
- Update budget, schedule, communications plan, etc
Monitor and Control Risks (4 steps)
- Regularly review and update the risk and issue register,
- Add new risks and issues to the register
- Schedule regular risk management meetings
- Report risk and issues in status reports
What are typical project risks?
- Large investments
- Unbalanced cash flows
- Innovative technological systems
- Novel procurement methods
- Very large or highly complex projects
- Severe time constraints
- Stakeholder inexperience
- High performance/quality standard
- Highly regulated environments
- Environmental, political or cultural sensitivities
- Locational instabilities and conditions
Traditional risk matrix
Risk = probability x consequence
(1=low, 3=high)
Three dimensional risk matrix
Risk = probability x consequence x duration
(3-5 =low, 11-17=high, 18-27=extreme)