Project Risk Management 101

Why Project Managers should Worry about Risk

© Carla Crepin-Swift

Jun 24, 2009
Risk Mitigation, Colvin Peters
Throughout the life of a project several issues can (and usually do) jeopardize project success. Thus, risk management is essential.

Risk management is a proactive and realistic alternative the "all will go well" attitude that is portrayed by many project stakeholders.

Project managers should worry about risk because it is inherent in any project. Project managers must, therefore:

  1. avoid being blindsided;
  2. manage the project outcome; and
  3. avoid the crisis management of "firefighting mode" syndrome.

"Risk Management includes the processes concerned with ... identification, analysis, responses and monitoring and control on a project. The objectives ... are to increase the probability and impact of positive events and decrease the probability and impact of events adverse to a project." (PMBOK, 237)

From the above definition, it must be noted that project managers should manage not only the negative issues, but the positive ones as well: threat versus opportunity.

Difference between Risk and Opportunity

Risk and opportunity are related. An opportunity cannot be realized without taking risks. Risk is essential to making the project progress. Balance is the key.

Opportunity and risk are at their highest levels at the start of the project while they are at their lowest at the end of the project. This is so because there are many unknown factors and uncertainties in the beginning. However, as the project progresses, these unknown factors become known, therefore risk and opportunity continuously decrease until there is none left at the end of the project.

Effective Risk Identification on a Project

There are essentially three components of risk. Risk is the probability of an event occurring and the significance of the consequences. It is characterized by the risk event, the risk probability and the impact of the event. It is not only the possibility of suffering harm or loss (negative consequences) but also the possibility of benefiting from an opportunity (positive). In other words, it is measure of the inability to achieve the project's objectives within the allotted budget and time.

Additionally, there are two types of overall risks. These are:

  1. Organizational risk - this type is specifically related to the operation of a business enterprise, whether it is public or private. The project manager has no control over this type of risk.
  2. Project risks - this type is directly linked to the planning and delivery of a product to a customer. The project manager has some control over this type of risk.

Factors that Affect Individual and Organizational Perceptions of Risk

There is a trade-off between control that is achieved on the project and the project risk. The more control the project manager has over the project, the lesser the project risk. Therefore, the project manager would be more willing to accept the project risk. The reverse is also true. The less control the project manager has over the project, the greater the risk. The project manager becomes less willing to accept the risk.

The factors affecting risk perception are:

  1. organizational environment;
  2. personal risk preference;
  3. time to event;
  4. previous successes and failures; and
  5. information availability in terms of amount, quality and accuracy.

Inexperienced people may not know what to look for and, thus, may not see all the risks.

The Risk Management Process

Risk management is a dynamic process with the following steps:

  1. Risk identification - this determines the risks and document the characteristics;
  2. Risk quantification and qualification risk analysis - this evaluates and analyses the risks and assess the outcome;
  3. Risk response (mitigation) planning - this defines the response steps;
  4. Risk monitoring and control - this executes the risk management plan; and
  5. Risk documentation - this establishes the project database and as documents procedures and identifies responsibilities, as well as conduct post-project reviews.

Benefits of Risk Management

  1. It provides more control or project outcomes;
  2. It helps avoid or mitigate the consequences;
  3. It provides support for smarter decisions;
  4. It provides an assessment of what is ahead;
  5. It helps establish priorities;
  6. It reduces the probability and impact of undesirable events; and
  7. It encourages the management of positive events.

Risks should be managed throughout the life of the project. The risk management process provides stability and direction during the life of the project. Project managers should make risk a key component on the project plan. They should facilitate the identification of the risk, encourage awareness of risks, delegate responsibility to the appropriate team members and review risks as a normal part of team meetings.

Sources

Wysocki, Robert K, Beck, Robert (Jr.) and Crane, David B. "Effective Project Management". John Wiley & Sons, Inc., 2000

Lewis, James P. "Project Planning, Scheduling and Control". The McGraw Hill Companies, Inc., 2001

Project Management Institute. "A Guide to the Project Management Body of Knowledge (PMBOK Guide) - Third Edition" Project Management Institute, 2004


The copyright of the article Project Risk Management 101 in Business Project Management is owned by Carla Crepin-Swift. Permission to republish Project Risk Management 101 in print or online must be granted by the author in writing.


Risk Mitigation, Colvin Peters
       


Post this Article to facebook Add this Article to del.icio.us! Digg this Article furl this Article Add this Article to Reddit Add this Article to Technorati Add this Article to Newsvine Add this Article to Windows Live Add this Article to Yahoo Add this Article to StumbleUpon Add this Article to BlinkLists Add this Article to Spurl Add this Article to Google Add this Article to Ask Add this Article to Squidoo