Project Risk Management Flashcards
What are the Project Risk Management processes?
- plan risk management
- identify risks
- perform qualitative risk analysis
- perform quantitative risk analysis
- plan risk response
- implement risk responses
- monitor risks
What is the definition of Project Risk Management?
- includes the process of conducting risk management planning, identification, analysis, response planning, response implementation, and monitoring risk on a project
- the objectives of project risk management are to increase the probability and/or impact of positive risks and to decrease the probability and/or impact of negative risks, in order to optimize the chances of project success
- all stakeholders involved with the project should play some role in managing risks
What is the role of the PM during project risk management?
- accountable for the day-to-day management of the project
- ensuring that the project risk processes are properly and effectively implemented
Why is project risk management so critical?
- project success is directly related to the effectiveness of project risk management
- risks are the “unknowns” of the project and will emerge continuously during a project
- the project team needs to know what level of risk exposure is acceptable in pursuit of the project objectives
- generally, risks with higher levels of impact can be addressed before those that are comparably minor
What is overall project risk?
the term used to describe the effect of uncertainty on the project as a whole
What are the two risk levels for every project?
- high level
- low level
What is the plan risk responses process?
-the process of developing options, selecting strategies, and agreeing on actions to address overall project risk exposure, as well as to treat individual project risks
What are the project risk management processes belonging to the planning process group?
- plan risk management
- plan risk responses
- identify risks
- perform qualitative risk analysis
- perform quantitative risk analysis
What is the identify risks process?
-the process of identifying individual project risks as well as sources of overall project risk, and documenting their characteristics
What is the identify risks process?
-the iterative process of identifying individual project risks as well as sources of overall project risk, and documenting their characteristics
What is the perform qualitative risk analysis process?
-the process of prioritizing individual project risks for further analysis or action by assessing their probability of occurrence, impact, and other characteristics
What is the perform quantitative risk analysis?
the process of numerically analyzing the combined effect of identified individual project risks and other sources of uncertainty on overall project objectives
What is the monitor risks process?
the process of monitoring the implementation of agreed-upon risk response plans, tracking identified risks, identifying and analyzing new risks, and evaluating risk process effectiveness throughout the project
In what process group is the implement risk responses process?
executing process group
In what process group is the monitor risks process?
monitoring and controlling
What are the tailoring considerations for project risk management?
- project size
- project complexity
- project’s importance
What are the tailoring considerations for project risk management?
- project size
- project complexity
- project’s importance
- development approach
- agile/adaptive environments
What are the agile/adaptive environments tailoring considerations for project risk management?
- in both agile and traditional PM approach, risks should be identified and their mgmt. carefully considered
- in agile risk management, risk responses are implemented in a more integrated fashion with other ongoing processes
- processes are reviewed more frequently and adjusted as needed
- risks in agile projects are referred to as “impediments”
- high-variability environments incur more uncertainty and risk
- to address this, adaptive projects use frequent reviews of incremental products and cross-functional teams to share knowledge and ensure that risk is understood and managed
- risk is considered when selecting the work of each iteration
What are the trends and emerging practices for project risk management?
- non-event risks
- project resilience
- integrated risk management
What is integrated risk management?
- involves managing organizational risks from a strategic perspective
- projects exist in an organizational context, and they may be be part of a program or portfolio
- risks exist at each of these levels and should be owned and managed at the appropriate level
What are emergent risks?
can only be recognized after they’ve occurred
What is included in the emerging project resilience practices for project risk management?
- the right level of budget and schedule contingency for emergent risks, in addition to a risk budget set aside for known risks
- flexible project processes (like strong change management) to cope with emergent risks by maintaining the direction toward project goals
- an empowered project team with clear objectives that is trusted to get the job done within agreed-upon constraints
- frequent reviews of early warning signs help identify emergent risks as early as possible
- input from stakeholders to clarify areas where the scope or strategy can be adjusted in response to emergent risks
When is the plan risk management process performed in a project?
- it is part of the planning process group and is at the time in the life cycle required to establish the scope of project, refine the objectives, and define the course of action required to attain the project objectives
- this process is performed once or at predefined points in the project
What is the key benefit of the plan risk management process?
-it ensures the degree, type, and visibility of risk management are proportionate to the level of risks and the importance of the project to the organization and other stakeholders
What is the role of the PM during the plan risk management process?
- driver of the risk mgmt. processes and will plan all the risk identification and tracking activities
- determine how risk will be managed on the project
- determine the acceptable levels of risk exposure for project objectives
- document how risk activities and audits are conducted
What is the impact of the plan risk management process?
- project risks can happen in all aspects of the project
- careful and conscientious application of risk management planning enhances the probability of success for the entire project
What is the risk management plan?
- component of the PM plan that describes how risk mgmt. activities will be structured and performed
- includes risk strategy, methodology, roles and responsibilities, , funding, timing, and risk categories
What is the risk strategy portion of the plan risk management process?
-describes the general approach to managing risk during a project
What is the roles and responsibilities portion of the risk management plan?
-defines the lead, support, and risk management team members for each type of activity described in the risk mgmt. plan and clarifies their responsibilities
What is the methodology portion of the risk mgmt. plan?
-defines the specific approaches, tools, and data sources that will be used to perform risk mgmt. on the project
What is the funding portion of the risk mgmt. plan?
-identifies the funds needed to perform activities related to project risk mgmt. and establishes protocols for the application of contingency and management reserves
What is the timing portion of the risk mgmt. plan?
defines when and how often the project risk mgmt. processes will be performed throughout the project life cycle, and establishes risk mgmt. activities for inclusion into the project schedule
What is the risk categories portion of the risk mgmt. plan?
provide a means for grouping individual project risks.
a common way to structure risk categories is with a risk breakdown structure (RBS), which is a hierarchical representation of potential sources of risk
an RBS helps the project team consider the full range of sources from which individual project risks may arise
What are inputs to the plan risk management process?
- PM plan
- Project documents (stakeholder register)
- EEFs
- project charter
- OPAs
What are potential EEFs that can be inputs to the plan risk mgmt. process?
-overall risk thresholds set by the organization or key stakeholders
What are potential OPAs that can be inputs for the plan risk mgmt. process?
- organizational risk policies
- risk categories
- common definitions of risk concepts and terms
- risk statement formats
- templates for the risk mgmt. plan, risk register, and risk report
- roles and responsibilities
- authority levels for decision making
- lessons learned repository from previous similar projects
What are outputs produced by the plan risk mgmt. process?
- risk mgmt. plan
What are some of the tools and techniques used in the plan risk mgmt. process?
- expert judgement
- meetings
- data analysis (stakeholder analysis)
A thorough analysis of the _______ will help identify potential risks to the project
- risk identification checklist based on historical information and knowledge
What is a SWOT analysis?
- stands for strengths, weaknesses, opportunities, and threats
- a data analysis technique that examines the degree to which organizational strengths may offset threats and determines if weaknesses might hinder opportunities
What is the key benefit of the identify risks process?
it documents individual project risks and the sources of overall project risk
- a consistent format should be used for risk statements to ensure each risk is understood
- it is important to involve the project team so they can develop a sense of ownership and responsibility for risk management
When does the identify risks process occur?
- part of planning process group
- occurs in the time of the life cycle required to establish the scope of the project, refine objectives, and define the course of action required to obtain project objectives
- performed throughout the project
What is the role of the PM during the identify risks process?
-conduct the identification activities per the risk mgmt. plan or delegate them to the team members to carry out
What is the impact of the identify risks process?
- project team should spend time identifying all issues comprehensively
- all issues, small or large, may impact the project
- only after every aspect of the project has been analyzed for risks, should the team move forward with solutions
What are the inputs to the identify risks process?
- PM plan
- EEFs
- OPAs
- project documents
- procurement documentation
- agreements
What components of the PM plan may be inputs to the identify risks process?
- requirements mgmt. plan
- schedule mgmt. plan
- cost mgmt. plan
- resource mgmt. plan
- quality mgmt. plan
- risk mgmt. plan
- scope baseline
- schedule baseline
- cost baseline
What are potential EEFs that may be inputs to the identify risks process?
- published material, including commercial risk databases or checklists
- academic studies
- benchmarking results
- industry studies of similar projects
What are potential OPAs that may be inputs to the identify risks process?
- project files
- organizational and project process controls
- risk statement formats
- checklists from previous similar projects
What are some of the project documents that may be inputs to the identify risks process?
- assumption log
- cost estimates
- duration estimates
- issue log
- lessons learned register
- requirements documentation
- resource requirements
- stakeholder register
What are the outputs produced by the identify risks process?
- risk report
- project documents updates
- risk register
What are some of the project documents updates that may be outputs produced by the identify risk process?
- assumption log
- issue log
- lessons learned register
What are some of the tools and techniques used during the identify risks process?
- meetings
- expert judgement
- data analysis
- interpersonal and team skills
- data gathering
- prompt lists
What are some of the data analysis tools and techniques used during the identify risks process?
- root cause analysis
- assumptions and constraint analysis
- SWOT analysis
- document analysis
What is a root cause analysis?
used to discover the underlying causes that lead to a problem, and then to develop preventive action
What is an assumptions and constraint analysis?
explores the validity of assumptions and constraints to determine if they pose a risk to the project
What is a document analysis?
a structured review of project documents, including plans, assumptions, constraints, previous project files, contracts, agreements, and technical documents
What are some of the data gathering tools and techniques that may be used during the identify risks process?
- brainstorming
- checklists
- interviews
What best describes how risk checklists are developed?
-developed based on historical information and knowledge that has been accumulated from similar projects and from other sources of information