Risk Management Level 1 Flashcards
What is the definition of risk?
There are varying definitions, however essentially a risk is an uncertain event or circumstance, that if it occurs, will impact the outcome of a project.
What is the purpose of risk management?
It aims to minimise the impact of a risk to a project through 6 key stages:
- Initiate
- Identify
- Analyse
- Evaluate
- Respond
- Monitor
What is a risk assessment?
An assessment of the risk to identify the likelihood and severity of the risk being released
What is the difference between a quantitative and qualitative risk assessment?
Qualitative - assesses risk in terms of the impact / likelihood, describes / defines the risk without allocating a value to it
Quantitative - provides a quantitative approach to assessing risks in terms of possible cost or programme / schedule costs
How is a qualitative risk assessment carried out?
An assessment is made of the likelihood that the risk will occur and the magnitude of its impact - each is scored
The simplest method is to multiply the 2 scores together to give an overall score
Sometimes the risks will be weighted for risks with greater influence
How is a quantitative risk assessment carried out?
Scored / % of probability / likelihood
Likely cost or time impact
Multiply the two together to gain overall risk value
Can add all values of risks together to provide an overall risk allowance within costs
What is a Monte Carlo simulation?
A computer generated simulation used to model outcomes
The probability value for each risk is inputted
Assessment of their impact is inputted (minimum, most likely and maximum)
Software then produces graphs to demonstrate:
- probabilities of completion at various costs
- distribution of out-turn cost outcomes
- identification of risks that have the most impact on outcome
Only as good as the information inputted
What is a risk register?
A document listing all the risks identified for the project, explaining the nature qualitatively and quantitatively
Aim to capture and maintain key information on all identified risks and opportunities relating to the project
How do you go about creating a risk register for a new project?
All members of the team come together and brainstorm as many elements of project risk as possible
Usually the PM will collate risks identified and add them to the register
How do you use the risk register?
Continually monitor risk items identified in initial risk register and make it a working document to identify project risks for the remainder of the project
Assign ‘likelihood’ and ‘impact’ scores to each risk to give an overall risk score
How do you report / monitor risks?
Using a risk register: Risks are logged, tracked through the life of the project
Log the threats / opportunities, likelihood / impacts, place in a category over who owns the risk
Needs regularly updating
What are the risk mitigation strategies according to NRM?
avoidance
reduction
transfer to contractor
sharing by the employer and contractor
retention by the employer
What is risk allocation?
To ensure risks are managed, each risk must be allocated to the party best able to deal with the risk - this owner should be noted on the risk register
What is the role of the ‘owner’ of a particular risk on the risk register?
Analyses the risk and determines what actions / controls should be taken
Identifies level of resources that needs to be committed to the risk action plans
Prioritise which risks are most important at which stage
What is risk allowance?
A sum included in the estimate to cover unknown expenses or unmitigated risks during the project
An estimate of the cost of dealing with an individual risk should it materialise