2019-07-31
Understanding risk management in project management is a key skill required of all project managers if they hope to deliver successful initiatives and add value for their customer -- but what does it take to effectively manage project risks? In this blog, I outline 7 steps to get you and your project team on the right track to start managing risk today.
Step one - create a risk management approach
Project teams often do risk management in a haphazard way, inconsistently using tools and techniques throughout the initiative. To avoid this situation, project managers should create a risk management approach at the outset. This approach would outline how risks would be identified, evaluated and mitigated throughout the project. For example it could describe what information would be recorded against each risk and how the probability and impact of each risk would be calculated. It would also define the threshold level of risk that project stakeholders are willing to bear.
Step two - decide how you will identify risks
Where do you start when it comes to identifying all the potential risks in your project? There are a number of approaches. These include reviewing lessons learned from previous projects, carrying out a risk brainstorming session, using an industry specific prompt list showing likely areas of risk or creating a risk breakdown structure. The latter is a hierarchical diagram like an organization chart. It can be sub divided in a range of ways, for example by product, by team or using PESTLE (political risks, economic risks, social risk, technological risks, legal risks, environmental risks) It can be used as a focal point for a workshop to identify all risks in each area of the project.
Step three - identify some early warning indicators of increased risk
It is all too easy for a project manager to myopically focus on a small set of performance areas such as whether the project is ahead or behind schedule. However there are a range of other early warning indicators that identify how the project is performing. For example the percentage of approvals accomplished, the number of issues being raised and the number of defects being captured in quality inspections. Reviewing all these performance aspects of a project increases the likelihood of identifying more critical risks.
Step four - assess the project's overall exposure to risk
It is good practice to regularly assess a project's overall exposure to risk. Each risk is assessed in terms of its probability as a percentage and its impact should it occur in monetary terms. By multiplying one by the other an expected value for each risk can be calculated. Adding up the expected values of all the risks gives a monetary figure that gives an indicator of the project's overall exposure to risk.
Step five - evaluate the proximity of each risk
Another good practice is to assess when each risk is likely to occur. This is called the proximity of a risk. Each risk could be assigned a category depending on when it might occur such as imminent, in the next stage of the project or after the project. The project manager should also consider whether the probability of the risk occurring and/or the impact on the project if they do occur, might vary over time. This information can help project managers prioritize which risks to focus on in any given time.
Step six - identify the causes of a risk
Rather than just thinking about the event that may or may not occur such as a road collapsing underneath a heavy load, the project manager should also consider what could cause the risk. This allows for a deeper analysis of any individual risk. If the road collapses it could be caused by heavy rain, bad driving or poor construction techniques. Understanding what are the most likely causes for each potential risk event, can help implement better mitigation plans to deal with them
Step seven - focus on opportunities
Risks can also be opportunities. For example a new technology might appear which would make it quicker to build a product. If opportunities are spotted the project team might consider three ways of approaching them: exploit them by doing something that ensures they occur, increase the probability or impact of the event occurring or simply reject the opportunity. In practice a good project manager is always looking for opportunities to improve their project, but making this explicitly part of the risk management process, improves the probability of spotting more.