Project Management Risks – Questions and Answers (Part 2)

Risk managementIn my previous post, I’ve addressed the first three questions on risk management and here I address the other two and, at the end, provide a list of take-home messages.

4. How many risks should be on your risk log and for how long?

It depends on the project size, type, complexity, and any other factor that could influence your project. However, in order to be on your risk log, a risk needs to be identified, analyzed (its probability and impact quantified), and mitigation measures applied. Assign a risk owner to each risk. This person is responsible and accountable for monitoring that risk and for defining and implementing mitigation measures.

As you can imagine, not all identified risks will be worth of listing in the risk log, as some risks are just too minor to be worth the cost, or time, of mitigating them. In general, the cost of mitigating a risk should be lower than the cost of the risk consequences if the risk does occur. Importantly, you should never delete risks from the risk log. Even a risk that has occurred can occur again, if not in this project, then in future projects of the organization. In this second case, the risk log becomes a lessons learned piece of documentation.

5. How do you manage project risks?

Risk management is something that needs to be done continuously, throughout the project, not only at the beginning. A project’s success depends on commitment to risk management. Make sure everyone is aware of risk management and appoint risk owners for each risk in the risk log. Regularly review risks, as any change to the project can add new risks or modify the impact and probability of the risks you previously identified.

Manage risks systematically using risk management techniques:

  • Avoid risks. If the project is too risky, the sponsor might decide to cancel the project altogether or modify it to remove the major risks. For this, make sure the sponsor is aware of the risks to the project. Take into account that some sponsors might decide to accept the consequences of some risks.
  • Soften the negative risks’ impact and maximize the positive risks’ consequences to the project.
  • Transfer the risk to a third party (by insurances, guarantees etc.). The risk will still be present, but you’ll have mitigated its consequences by transferring it to another party, usually for a cost.
  • Accept minor risks (those with low probability and low impact) and their consequences if the cost of mitigating them is too high.

(more…)

By |2023-05-22T06:38:08+00:00July 2nd, 2015|Risk Management|0 Comments

Project Management Risks – Questions and Answers (Part 1)

Project Management Risk“To save all we must risk all”, Friedrich Schiller once said. If he were a project manager today, he might say, “To save all we must manage all risks”. Books, journals, corporate websites, YouTube, and discussion forums burst of information on risk management, because risk is inherent to every project just like uncertainty is inherent to any risk. Risk management is essential if you want your project to succeed. This article answers five questions on project risk management:

  1. What is the best definition of project risk?
  2. What’s the difference between a risk and an issue?
  3. How do you identify risks?
  4. How many risks should be on your risk log and for how long?
  5. How do you manage project risks?

1. What is the best definition of project risk?

One of Oxford Dictionary’s 1000 most frequently used words, risk refers to the possibility of something unpleasant, dangerous, or harmful occurring. This negative connotation of risk is so deeply rooted in many people’s minds that it takes some effort to get used to the project management definition of risk: “an uncertain event or condition that, if occurs, has an effect on at least one project objective,” according to the PMBOK.

Risk can be any uncertain event that, if it happens, will be good or bad for the project. Negative risks become threats to the project, while positive risks become opportunities. Risk management should address both types of risks, minimizing threats and maximizing opportunities.

Project risk is something you can control. You must manage risks if you want your project to succeed. However, be aware that there are risks called black swans that you cannot include in your risk analyses. I’ve explained why these risks are special and what you can do to minimize their consequences in another article.

 2. What’s the difference between a risk and an issue?

A risk is something uncertain, so it will happen or not during your project. An issue is an event that has happened or that you know for sure it will happen, even though you might not know when. A risk that occurs becomes an issue. This might be bad news or good news for you and your project, depending if the risk is negative or, respectively, positive. A positive risk becomes an opportunity for your project—for example, the opportunity to finish earlier than scheduled, or below budget, or anything that you might otherwise consider “lucky”. Both risks and issues have causes and consequences. Risk management is the way to deal with risks while problem solving is the way to deal with issues. (more…)

By |2022-11-18T10:20:02+00:00May 11th, 2015|Risk Management|2 Comments
Copyright 2026 RationalPlan
Go to Top