Risk Management Flashcards

1
Q

Uncertainty

A

Lack of knowledge about an event that reduces confidence in conclusions drawn from the data; the work that needs to be done, the cost, the time etc can be uncertain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Risk averse

A

Someone who does not want to take risks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Risk factors

A

Likelihood of the risk occurring
Impact or possible outcomes ( what is at stake )
When it could occur in the project
How often the risk events could occur

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Threats and opportunities

A

Threat - something that can go wrong and negatively impact the project

Opportunity - can have a positive impact on the project; if we provide training to improve efficiency this work package can be done 3 days sooner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Risk appetite

A

High level description of the acceptable level of risk

Example; the sponsor is willing to accept little risk to the schedule of this project

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Risk tolerance

A

Measurable amount of acceptable risk

Example; so sorry would be willing to accept schedule risk of up to 14 days on this project

A company may have more tolerance for cost related risks than for risks that affect customer satisfaction

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Risk thresholds

A

Specific point at which risk becomes unacceptable

Example; the sponsor will not accept a risk of the scheduled being delayed 15 days or longer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Plan risk management

A

Answers the questions of how much time should be spent on risk management based on the needs of the project and who will be involved and now the team will go about performing risk management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Risk management plan

A

Methodology - how you will perform risk management
Roles and responsibilities - who will do what
Budget - cost of risk management process
Timing - when to do risk management for the project
Risk categories - standard list of risk categories to ensure areas of risk are not forgotten
Tracking - how the risk process would be audited
Reporting - reports related to risk management and now they will be used
Stakeholder tolerances
Definitions of probability and impact

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Risk categories

A

External - regulatory, environmental, government, market shifts
Internal - time, cost, or scope changes, inexperience, poor planning, people, staffing
Technical - changes in technology
Unforeseeable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Sources of risk ( also risk categories )

A
Schedule 
Cost 
Quality 
Scope 
Resources 
Customer or stakeholder satisfaction
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Business risk

A

Risk of a gain or loss

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Pure insurable risk

A

Risk of loss ( fire, theft, personal injury )

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Tools to identify risks

A
Documentation reviews 
Information gathering techniques 
SWOT analysis 
Checklist analysis 
Assumption analysis 
Diagramming techniques
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Documentation reviews

A

What is and is not included in documentation like the charter contracts and planning information can help identify risks; lessons learned

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Information gathering techniques

A

Brainstorming
Delphi technique - technique to achieve consensus among experts who participate anonymously; request is sent responses are compiled and result are sent back until there is a consensus
Interviewing
Root cause analysis - identified risks are reorganized by their root causes to help identify more risks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Strengths weaknesses opportunities and threats ( SWOT ) analysis

A

Identify project strengths and weaknesses and thereby identify risks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Checklist analysis

A

Checklist of risk categories and use that to identify specific risks within each category

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Assumption analysis

A

Analysis of assumptions and whether or not they are valid may lead to identifying more risks

20
Q

Diagramming techniques

A

Causes and effect diagrams and flow charts that can be used to identify the root causes of issues

21
Q

Risk register

A

Is where most of the risk information is kept and is a document for the whole risk management process that will be constantly updated with information

Is the main output of several of the risk management processes

22
Q

Risk management

A

You work to increase the probability and impact of opportunities on the project (positive events) while decreasing the probability and impact of threats to the project (negative events)

Risks are identified in initiating and continually kept up to date or added to while the project is underway

23
Q

Qualitative risk analysis

A

The probability of each risk occurring and the impact of each risk occurring using a standard scale; and based on subjective evaluation

Compare the risk of the project to the risk of other projects
Determine whether the project should continue or be terminated
Determine whether to proceed to perform quantitative risk analysis or plan risk responses

24
Q

Probability and impact matrix

A

Can be used to sort or rate risks to determine which ones warrant an immediate response and which ones should be put on the watch list and results in a consistent evaluation of low medium and high for the project

25
Q

Risk data quality assessment

A

How accurate and well understood is this risk information; you assess the accuracy and reliability of the data and determine whether more information is needed to understand the risk before a qualitative assessment can be done

26
Q

Risk categorization

A

What will we find if we regroup the risks by categories or by work package; understanding which work packages processes or people have the most risk associate with them

27
Q

Risk urgency assessment

A

Noting risks that should move more quickly through the process ; risk may occur soon or will require a long time to plan a response

28
Q

Perform quantitative risk analysis

A

Involves numerically analyzing the probability and impact of risks; is not always required for all projects

Example the risk in qualitative risk analysis might be a 5 and is stated as a $40,000 impact in quantitative analysis

29
Q

Sensitivity analysis

A

Technique used to compare the potential impacts of risks identified using a tornado diagram; risks are represented with horizontal bars the longest bars represent greater risk and progressively shorter bars represent lower risk.

30
Q

Expected monetary value analysis

A

EMV = P x I

Calculating the expected monetary value to determine overall ranking of risks

31
Q

Monte Carlo analysis

A

Uses network diagram and estimates to perform the project many times and to simulate the cost of schedule results of the project

Usually done with a computer based program
Evaluates the overall risk in the project
Determines the probability of completing the project on any specific day or for any specific cost
Determines the probability of any activity actually being on the critical path
Takes into account path convergence
Translates uncertainties into impacts to the total project
Can be used to assess cost and schedule impact
Results in a probability distribution

32
Q

Decision tree

A

Takes into account future events in making a decision today
Calculates the expected monetary value in more complex situations

It involves mutual exclusivity

33
Q

Plan risk response

A

Do something the eliminate the threats before they happen
Do something to make sure the opportunities happen
Decrease the probability and or impact of threats
Increase the probability and or impact of opportunities

For residual risks / threats
Do something if the risk happens (contingency plans)
Do something if contingency plans are not effective (fallback plan)

34
Q

Risk response strategies ( threats )

A

Avoid - eliminate the threat by eliminating the cause such as removing the work package or person

Mitigate - reduce the probability and impact of a threat by making it smaller in risk and possibility removing it from the list of top risks

Transfer - make another party responsible for the risk by purchasing insurance performance bonds warranties or guarantees by outsourcing the work

Avoidance and mitigation are used for high priory high impact risks
Transference and acceptance are used for low priority low impact risks

35
Q

Risk response strategies (opportunities)

A

Exploit - add work or change the project to make sure the opportunity occurs

Enhance - increase the likelihood and or positive impacts of the risk event

Share - allocate ownership or partial ownership of the opportunity to a third party

36
Q

Risk response strategies (threats and opportunities)

A

Accept - do nothing; may involve the creation of contingency plans and must be communicated to stakeholders; acknowledge the risk but not take any action

Active acceptance - establish a contingency reserve
Passive acceptance - no action but to document the strategy

37
Q

Workarounds

A

Unplanned responses to deal with the occurrence of an unanticipated event or problems on a project

38
Q

Risk reassessments

A

Periodically review the risk management plan and risk register and adjust the documentation as required

39
Q

Risk audits

A

Assess the overall process of risk management on the project as well as the effectiveness of specific risk responses that have been implemented

40
Q

Reserve analysis

A

Checking to see how much reserve remains and how much might be needed

Contingency reserves may only be used to handle the impact of the specific risk it was set aside for.

41
Q

Closing of risks

A

Allows the team to focus on managing risks the are still open and will result in the associated risk reserve being returned to the company

42
Q

Residual risks

A

Risks that remain after risk response planning

43
Q

Contingency plan

A

Plans describing the specific actions that will be taken if the opportunity or threat occurs

44
Q

Fallback plans

A

Actions that will be taken if the contingency plans are not effective

45
Q

Risk triggers

A

Events that trigger the contingency response

46
Q

Reserves

A

Reserves for time and cost

Contingency reserve - known unknowns; identified in risk management

Management reserves - Unknown known; items you did not or could not identify in risk management

47
Q

Secondary risks

A

Any new risk created by the implementation of selected risk responses should also be analyzed as part of risk response planning.