CHAPTER # 11
• PROJECT RISK MANAGEMENT
1
RECAP: PROJECT COMMUNICATIONS MANAGEMENT
2
RISK MANAGEMENT: AN OVERVIEW
• PROCESS OF WORKING ON RISK MANAGEMENT PLANNING, IDENTIFYING,
ANALYZING, RESPONSE PLANNING AND CONTROLLING OF PROJECT RISKS
• GOAL IS IT:
• INCREASE THE LIKELIHOOD OF POSITIVE RISKS
• DECREASE THE LIKELIHOOD OF NEGATIVE RISKS
• PROJECT MANAGER HAS TO BE PROACTIVE HERE
• END OF THE DAY SAVES TIME AND MONEY
3
RISK MANAGEMENT KNOWLEDGE AREA
4
RISK MANAGEMENT CONCEPTS
• THREATS
• OPPORTUNITY
• UNCERTAINTY
• RISK ATTRIBUTES
• PROBABILITY
• IMPACT
• RANGE
• WHEN
• HOW OFTEN
• RISK AVERSE
• RISK THRESHOLD
• RISK TOLERANCE
5
PLANNING RISK MANAGEMENT
• THE MAIN OUTPUT OF THIS PROCESS IS A RISK
MANAGEMENT PLAN—A PLAN THAT DOCUMENTS THE
PROCEDURES FOR MANAGING RISK THROUGHOUT A
PROJECT
• THE PROJECT TEAM SHOULD REVIEW PROJECT
DOCUMENTS AND UNDERSTAND THE ORGANIZATION’S
AND THE SPONSOR’S APPROACHES TO RISK
• THE LEVEL OF DETAIL WILL VARY WITH THE NEEDS OF
THE PROJECT
Information Technology Project Management, Seventh Edition 6
TOPICS ADDRESSED IN A RISK MANAGEMENT PLAN
• METHODOLOGY
• ROLES AND RESPONSIBILITIES
• BUDGET AND SCHEDULE
• RISK CATEGORIES
• RISK PROBABILITY AND IMPACT
• REVISED STAKEHOLDERS’ TOLERANCES
• TRACKING
• RISK DOCUMENTATION
Information Technology Project Management, Seventh Edition 7
IDENTIFYING RISKS
• IDENTIFYING RISKS IS THE PROCESS OF UNDERSTANDING WHAT POTENTIAL EVENTS
MIGHT HURT OR ENHANCE A PARTICULAR PROJECT
• ANOTHER CONSIDERATION IS THE LIKELIHOOD OF ADVANCED DISCOVERY
• RISK IDENTIFICATION TOOLS AND TECHNIQUES INCLUDE:
• BRAINSTORMING
• THE DELPHI TECHNIQUE
• INTERVIEWING
• SWOT ANALYSIS
Information Technology Project Management, Seventh Edition 8
RISK REGISTER CONTENTS
• AN IDENTIFICATION NUMBER FOR EACH RISK EVENT
• A RANK FOR EACH RISK EVENT
• THE NAME OF EACH RISK EVENT
• A DESCRIPTION OF EACH RISK EVENT
• THE CATEGORY UNDER WHICH EACH RISK EVENT FALLS
• THE ROOT CAUSE OF EACH RISK
• TRIGGERS FOR EACH RISK; TRIGGERS ARE INDICATORS OR SYMPTOMS OF ACTUAL RISK
EVENTS
• POTENTIAL RESPONSES TO EACH RISK
• THE RISK OWNER OR PERSON WHO WILL OWN OR TAKE RESPONSIBILITY FOR EACH RISK
• THE PROBABILITY AND IMPACT OF EACH RISK OCCURRING.
• THE STATUS OF EACH RISK
Information Technology Project Management, Seventh Edition 9
SAMPLE RISK REGISTER
• No.: R44
• Rank: 1
• Risk: New customer
• Description: We have never done a project for this organization before and don’t know too much about them. One of our
company’s strengths is building good customer relationships, which often leads to further projects with that customer. We
might have trouble working with this customer because they are new to us.
• Category: People risk
• Etc.
10
Information Technology Project Management, Seventh Edition
PERFORMING QUALITATIVE RISK ANALYSIS
• ASSESS THE LIKELIHOOD AND IMPACT OF IDENTIFIED RISKS TO DETERMINE
THEIR MAGNITUDE AND PRIORITY
• RISK QUANTIFICATION TOOLS AND TECHNIQUES INCLUDE:
• PROBABILITY/IMPACT MATRIXES
• THE TOP TEN RISK ITEM TRACKING
• EXPERT JUDGMENT
Information Technology Project Management, Seventh Edition 11
PROBABILITY/IMPACT MATRIX
• A PROBABILITY/IMPACT MATRIX OR CHART LISTS THE RELATIVE PROBABILITY OF A
RISK OCCURRING ON ONE SIDE OF A MATRIX OR AXIS ON A CHART AND THE RELATIVE
IMPACT OF THE RISK OCCURRING ON THE OTHER
• LIST THE RISKS AND THEN LABEL EACH ONE AS HIGH, MEDIUM, OR LOW IN TERMS OF
ITS PROBABILITY OF OCCURRENCE AND ITS IMPACT IF IT DID OCCUR
• CAN ALSO CALCULATE RISK FACTORS:
• NUMBERS THAT REPRESENT THE OVERALL RISK OF SPECIFIC EVENTS BASED ON THEIR
PROBABILITY OF OCCURRING AND THE CONSEQUENCES TO THE PROJECT IF THEY DO OCCUR
Information Technology Project Management, Seventh Edition 12
RISK PROBABILITY AND IMPACT MATRIX
13
PERFORMING QUANTITATIVE RISK ANALYSIS
• OFTEN FOLLOWS QUALITATIVE RISK ANALYSIS, BUT BOTH CAN BE DONE
TOGETHER
• LARGE, COMPLEX PROJECTS INVOLVING LEADING EDGE TECHNOLOGIES
OFTEN REQUIRE EXTENSIVE QUANTITATIVE RISK ANALYSIS
• MAIN TECHNIQUES INCLUDE:
• DECISION TREE ANALYSIS
• SIMULATION
• SENSITIVITY ANALYSIS
Information Technology Project Management, Seventh Edition 14
DECISION TREES AND EXPECTED MONETARY
VALUE (EMV)
• A DECISION TREE IS A DIAGRAMMING ANALYSIS TECHNIQUE USED TO HELP SELECT
THE BEST COURSE OF ACTION IN SITUATIONS IN WHICH FUTURE OUTCOMES ARE
UNCERTAIN
• ESTIMATED MONETARY VALUE (EMV) IS THE PRODUCT OF A RISK EVENT PROBABILITY
AND THE RISK EVENT’S MONETARY VALUE
• YOU CAN DRAW A DECISION TREE TO HELP FIND THE EMV
Information Technology Project Management, Seventh Edition 15
DECISION TREE ANALYSIS (EXAMPLE)
16
SENSITIVITY ANALYSIS
• SENSITIVITY ANALYSIS IS A TECHNIQUE USED TO SHOW THE EFFECTS OF CHANGING ONE
OR MORE VARIABLES ON AN OUTCOME
• FOR EXAMPLE, MANY PEOPLE USE IT TO DETERMINE WHAT THE MONTHLY PAYMENTS
FOR A LOAN WILL BE GIVEN DIFFERENT INTEREST RATES OR PERIODS OF THE LOAN, OR
FOR DETERMINING BREAK-EVEN POINTS BASED ON DIFFERENT ASSUMPTIONS
• SPREADSHEET SOFTWARE, SUCH AS EXCEL, IS A COMMON TOOL FOR PERFORMING
SENSITIVITY ANALYSIS
17
Information Technology Project Management, Seventh Edition
SIMULATION
• SIMULATION USES A REPRESENTATION OR MODEL OF A SYSTEM TO ANALYZE THE
EXPECTED BEHAVIOR OR PERFORMANCE OF THE SYSTEM
• MONTE CARLO ANALYSIS SIMULATES A MODEL’S OUTCOME MANY TIMES TO PROVIDE
A STATISTICAL DISTRIBUTION OF THE CALCULATED RESULTS
• TO USE A MONTE CARLO SIMULATION, YOU MUST HAVE THREE ESTIMATES (MOST
LIKELY, PESSIMISTIC, AND OPTIMISTIC) PLUS AN ESTIMATE OF THE LIKELIHOOD OF THE
ESTIMATE BEING BETWEEN THE MOST LIKELY AND OPTIMISTIC VALUES
Information Technology Project Management, Seventh Edition 18
MONTE CARLO OUTPUT
PLANNING RISK RESPONSES
• AFTER IDENTIFYING AND QUANTIFYING RISKS, YOU MUST DECIDE HOW TO RESPOND TO
THEM
• FOUR MAIN RESPONSE STRATEGIES FOR NEGATIVE RISKS:
• RISK AVOIDANCE
• RISK ACCEPTANCE
• RISK TRANSFERENCE
• RISK MITIGATION
• FOUR MAIN RESPONSE STRATEGIES FOR POSITIVE RISKS:
• EXPLOIT
• ENHANCE
• SHARE
• ACCEPT
Information Technology Project Management, Seventh Edition 20
CONTROLLING RISKS
• INVOLVES EXECUTING THE RISK MANAGEMENT PROCESS TO RESPOND TO RISK EVENTS AND
ENSURING THAT RISK AWARENESS IS AN ONGOING ACTIVITY PERFORMED BY THE ENTIRE
PROJECT TEAM THROUGHOUT THE ENTIRE PROJECT
• WORKAROUNDS ARE UNPLANNED RESPONSES TO RISK EVENTS THAT MUST BE DONE WHEN
THERE ARE NO CONTINGENCY PLANS
• MAIN OUTPUTS OF RISK CONTROL ARE:
• WORK PERFORMANCE INFORMATION
• CHANGE REQUESTS
• UPDATES TO THE PROJECT MANAGEMENT PLAN, OTHER PROJECT
DOCUMENTS, AND ORGANIZATIONAL PROCESS ASSETS
Information Technology Project Management, Seventh Edition 21
REFERENCES
• KATHY SCHWALBE, INFORMATION TECHNOLOGY PROJECT MANAGEMENT, SEVENTH
EDITION, COURSE TECHNOLOGY – CENGAGE LEARNING, 2013.
• A GUIDE TO THE PROJECT MANAGEMENT BODY OF KNOWLEDGE, FIFTH EDITION,
PROJECT MANAGEMENT INSTITUTE, 2013. (PMBOK GUIDE)
• HTTPS://[Link]/
• HTTPS://[Link]/
• HTTP://[Link]/FAQPM/[Link]
• PROJECT ACADEMY
• HTTP://[Link]/RESOURCE-MANAGEMENT/14763-THE-
DIFFERENCE-BETWEEN-RESOURCE-LOADING-AND-RESOURCE-LEVELING/
• HTTP://[Link]/DLDTEM/[Link]
22
QUESTIONS
23
SAMPLE RISK BREAKDOWN STRUCTURE
24
Information Technology Project Management, Seventh Edition