PMBOK (the project management book of knowledge) gives us a wonderful (and comprehensive) outline for managing risk in any project. Now more than ever, you and I have a lot of risk to manage and mitigate – especially if we are managing a portfolio of business processes and/or are expected to treat our process improvement initiatives as though they are full-fledged projects (which I believe they are).
Here’s the basic outline and a few tools (credit goes to PMBOK). As you read, notice how much emphasis there is on access to information, data and analysis. Risk management is a series of actions and exercises. It is very much a verb! Those of us who are tasked with improving workflow and business processes need to be mindful of the risks involved in our work and bright ideas as much as we need to be aware of the broader environment we are working in. Be vigilant for risks inherent in your inputs, process, outputs (deliverables) as well as your assumptions. Nobody wants to make a mess of something they were asked to improve.
Risk Management Outline
1. Risk Management Planning – approach to and plan for risk management as well as the approach an organization takes to execution of plans
2. Risk Identification – determining risks and identifying the characteristics of those risks
3. Qualitative Risk Analysis – prioritizing risks responses based on probability of occurrence and impact
4. Quantitative Risk Analysis – analyzing effect of risks should they come to fruition
5. Risk Response Planning – developing options and actions to minimize risks and their effects
6. Risk Monitoring & Control – tracking risks, monitoring residual risks, identifying new risks, executing risk response plans and evaluating effects of those plans
Note: PMBOK states some risks are positive and refers to them as Opportunities. Some risks are negative and are commonly referred to as Threats. I think it is a stretch to call a risk an “opportunity.” I prefer that you conduct a SWOT analysis.
I am including a couple of simple tools (since its Thanksgiving!)
|
Impact |
Very Low |
Moderately Low |
Neutral |
Moderately High |
Very High |
|
Cost |
|
|
|
|
|
|
Time |
|
|
|
|
|
|
Scope |
|
|
|
|
|
|
Quality |
|
|
|
|
|
Measuring Probability
|
Probability |
Threats |
Opportunities |
|
Very High |
|
|
|
Moderately High |
|
|
|
Neutral |
|
|
|
Moderately Low |
|
|
|
Very Low |
|
|
Risk Assessment Tool
|
Dimension |
Risk |
|
Technical |
· Requirements · Technology · Complexity & interfaces · Performance & reliability · Quality |
|
External |
· Subcontractors & suppliers · Regulatory · Market · Customer · Weather |
|
Organizational |
· Project dependencies · Resources · Funding · Prioritization |
|
Project Mgmt |
· Estimating · Planning · Controlling · Communication |