RISK MGMT Flashcards
2 TYPES OF RISK
Pure Risk and Business Risk
3 TYPES OF RISK TOLERANCES
- Risk-Averse, 2. Risk Seeker, 3. Risk-Neutral
4 Strategies for Negative Risks/Threats
Avoid, Transfer, Mitigate, Accept
4 STRATEGIES for POSITIVE RISKS/OPPORTUNITIES
Exploitation, Sharing, Enhancement, and Acceptance
ACCEPTANCE RISK STRATEGY
tolerate the risk and deal with it if the risk actually occurs. Usually only chosen if no other option is available
ANALYZE PROGRAM RISKS
The process of prioritizing risks for action or further anlaysis, documenting incident probability and effect, and assessing the impact of risks on the program and its components
ANALYZE RISKS INPUTS (5)
- Pg Risk Register - What to analyze 2. Pg Mgmt Plan - format and criteria for integrating risk analysis 3. Pg Risk Mgmt Plan - establishes R/R for risk, budgets, risk categories, RBS template, etc 4. Pg Architecture Baseline - Is this new structure? greater risk 5. Lessons Learned Database - history
ANALYZE RISKS OUTPUTS (1)
Pg Risk Register Updates - how analysis done, results of analysis
ASSUMPTION ANALYSIS
A technique to determine if the program or project assumptions are accurate, consistent, and complete and, if not, the resultant risks to the program or project
AVOID RISK STRATEGY
modifying the plan to remove the risk - get rid of the problem
BRAINSTORMING
A data-generating technique which includes team members or subject matter experts for the purpose of solving problems, identifying risk, and planning-related activities for programs or projects
BUFFER
Compensation in the planning for unknown items that could occur; typically schedule or cost-related; sometimes calles reserve
BUSINESS RISK
typically uninsurable - inherent in the process of doing business
COMPONENT RISK MGMT PLANS
Risks escalated by component managers are incorporated and merged, then inter-dependent risk factors are identified
CONTINGENCY PLAN
pre-established actions that the team executes if a known risk event occurs on the program or project. Contains information such as triggers, effect on schedule, impact on cost, required resources, and status (planned, ready, activated, obsolete)
CONTINGENCY RESERVES
For risk events you know can happen on a project (Known Unknowns). reserves that can help mitigate schedule or cost issues (risk), in the case of changes with the scope or quality on the program or project
DECISION TREE ANALYSIS
looking at the probability and impact of all potential decisions to determine the potential Expected Monetary Value of the opportunity; helps an organization make decisions based on potential outcome and impact.
DELPHI TECHNIQUE
A technique to attain consensus wihtin a group of experts; typically used to gain vision about future direction or development
DIAGRAMMING TECHNIQUES
used to help decompose or categorize risks (ishikawa, flowcharts, influence diagrams)
ENHANCE RISK STRATEGY
takes steps to improve the size or capacity of the risk event by determining the key variable involved and then maximizing that variable
EXPECTED MONETARY VALUE (EMV)
the product of multiplying the monetary value impact and probability of the risk event; helps an organization make decisions based on potential outcome and impact. EMV = %Prob outcome 1 * Result of outcome 1 + % Prob outcome 2 * result of outcome 2
EXPLOIT RISK STRATEGY
takes steps to ensure the opportunity will occur
FALLBACK PLANS
A type of plan created for risks with a great impact on program or project goals, to be executed if attempts to minimize the risk are not successful
ID RISKS INPUTS (7)
- Pg Scope Doc - lists assumptions or dependencies 2. Pg Risk Mgmt Plan - method for ID risks, tracking, etc 3. Comp Risk Mgmt Plans - ID’d risks from components and approaches 4. Pg Mgmt Plan - How to integrate risks into other areas 5. Pg Governance Structure - mech to monitor 6. Lessons Learned Database - history to ID 7. Pg Stakeholder Mgmt Plan - Risk tolerances and how to influence levels
ID RISKS OUTPUTS (2)
- Pg Risk Register - ID’d risks, descrip, potential effect 2. Root Causes of Risk Updates - what might cause a risk (?)
IDENTIFY PROGRAM RISKS
The process of distinguishing risks to the program and recording their traits
ISSUE
An unresolved item needing attention or a program or project item causing confusion or disagreement
LESSONS LEARNED DATABASE
Contains the knowledge learned during the execution of similar programs, both in-house and public domain; the information is vital to the development of a comprehensive risk management plan
M/C PG RISKS INPUTS (7)
- Pg Risk Mgmt Plan - schedules and resources for M/C risks 2. Pg Risk Register - what to monitor and triggers to what for 3. Contingency Reserves - review for usage rate - High indicates not managing risks well 4. Pg Architecture Baseline - review to examine current risks and see if they are passed or if new ones exist 5. Pg Performance Reports - how we are progressing? are risks prob increasing? 6. Pg Issue Register - Are the Risk Resp Plans effective in resolving issues? 7. Contract Reviews - review for risk levels and if properly address issues with supplier
M/C PG RISKS OUTPUTS (4)
- Preventative Actions - action requests to address risks 2. Pg Risk Register Updates - updates to existing risks and new ID Risks 3. Pg Risk Mgmt Plan Updates - feed improvements needed regarding risk into plan 4. Lessons Learned Updates - for use now and for pg final report
MANAGEMENT RESERVES
Money set aside to account for events you cannot forecast happening. (unknown unknowns such as natural disastor)
MITIGATE RISK STRATEGY
minimizes the bad characteristics of the risk. Ex: Choosing to do the work internally instead of externally if the risk would be decreased
MONITOR AND CONTROL PROGRAM RISKS
The process of tracking and regulating risks, determining new risks, conducting ris response plan activities, and assessing the effectiveness of the risk response plan
MONTE CARLO ANALYSIS
A technique to simulate the outcome of a program or project many times to determine the range of possible outcomes and the probability of their occurrence. Often used in scheduling area.