Any uncertainties are risks. Risk management is the primary job of a PM. Its advantage is that fewer problems catch the project team off guard. Risk management influences the project plan and changes assumptions in the project rules. Risk management techniques try to increase the satisfaction of every stakeholder and improve the chances of success.
It cannot be overemphasized that risk planning happens repeatedly throughout the project.
Risk management processes systematically manage uncertainty to increase the likelihood of meeting project objectives. The key word is systematic.
• Known unknowns represent identified potential problems, such as the possibility of a strike when a labor contract expires, or enough rain to stall a construction project during winter in Seattle. We don’t know exactly what will happen, but we do know it has a potential to damage our project and we can prepare for it.
• Unknown unknowns are the problems that arrive unexpectedly.
These are the ones you honestly couldn’t have seen coming. But seasoned project managers do expect them, because they know something unexpected always happen
Types of Risks to Consider / Example
Strategic Risks: a competitor coming on to the market
Compliance Risks: the introduction of new health and safety legislation
Financial Risks: non-payment by a customer or increased interest charges on a business loan
Operational Risks: the breakdown of key equipment
Environmental Risks: like disasters
Employee Risks: supplying necessary number of employees, safety and health issues
Political and Economic Risks: in-stable political status in foreign markets you export goods to.
Risk management happens repeatedly throughout the project.
In definition, planning and control stages.
A risk management plan should be updated regularly, especially when old risks disappear and new risks occur.
Business/Strategic Risk vs. Project Risk
Selecting the right project is business risk. Managing uncertainty to meet the stakeholders’ objectives is project risk.
Risk Management Framework - 5 Steps
• Identify risks. Systematically find all the factors that threaten project objectives.
v Getting information: interviewing experts, brain storming, survey people who managed similar projects
v "Remember anything can go wrong will go wrong"
v Create a risk profile for the project (from past experience)
Ø A risk profile is a list of questions that address traditional areas of uncertainty on projects (see Table 5.1). These questions have been gathered and refined from previous, similar projects.
v History is the best predictor of the future
• Analyze and prioritize. Assess each risk in terms of its possible damage and likelihood of occurrence. Most projects have an enormous number of potential risks.
Risk Analysis
1. Define the risk, including the severity of the negative impact.
2. Assign a probability to the risk. How likely is it that this problem will occur?
3. Rank the risks according to probability and impact. This prioritized list focuses the project team on which risks they’ll manage.
- there are always risks you can manage
- use impact vs. probability to select high priority risks to manage
• Develop a response. Create strategies for reducing the possible damage and/or probability the risk will occur.
v Accept - do nothing
v Avoid - remove the part of project that cause risks
v Contingency plan
v Transfer the risks
v Mitigate the risks
Record risk management strategies using a risk log
• Establish reserves. Set aside additional funding for the project that will be used in case specific risks occur—the known risks—as well as funding for the unknown risks.
Set up a rainy-day fund: On a regular basis we set aside money—usually a small amount in case when things go wrong.
1. Identify all the risks in the risk log, where your strategy is to monitor the risk and prepare a contingency plan.
2. For each of these risks, consider the probability the risk will occur, estimate the additional cost of executing the contingency plan.
3. Sum the expected value of contingency for each of these risks. That usually is a large sum of money. The project manager has to negotiate the management of the organization
• Continuous risk management. Implement the strategies and monitor the effects of these changes on the project.
Risks change as project moves forward. Each project meeting should reserve sometime on risk changes.
v Monitor known risks with a risk log. Each risk in the risk log can be updated before every project status meeting to reflect the most recent information—even if that means “no change.”
v Check for new risks at regular status meetings. This activity won’t have the same level of thoroughness that the first risk identification activities had, but by routinely asking for new risks the project develops a climate of risk awareness. When team members do sense a risk, they’ll know where to report it.
v Repeat the major risk identification activities at preplanned milestones within the project.
· Projects, like life, are full of uncertainty. From one perspective, everything a project manager does involve a type of risk management.
· Risk management begins and ends with attitude. Skepticism and critical analysis expose lurking dangers.
· Positive, creative problem solving forms a strategy to remove the hazard
· Persistent, systematic vigilance reveals new perils, and the cycle begins again.
· Not all unexpected events are negative, some can be positive. So be mindful of taking advance of the positive one.