CHAPTER SEVEN

Managing Risk

McGraw-Hill/Irwin
Copyright © 2011 by The McGraw-Hill Companies, Inc. All
rights reserved.
Where
Where We
WeAre
Are Now
Now

7–2
 Risk
Risk Management
Management Processes
Processes
• Plan Risk Management
• Identify Risks
• Perform Qualitative Risk Analysis
• Perform Quantitative Risk Analysis
• Plan Risk Reponses
• Control Risks

7–3
 Risk
Risk Management
Management Process
Process
• Risk
– Uncertain or chance events that planning can not
overcome or control.
• Risk Management
– A proactive attempt to recognize and manage internal
events and external threats that affect the likelihood of
a project’s success.
• What can go wrong (risk event).
• How to minimize the risk event’s impact
(consequences).
• What can be done before an event occurs
(anticipation).
• What to do when an event occurs (contingency plans).
7–4
The
The Risk
Risk Event
Event Graph
Graph

FIGURE 7.1

7–5
 Risk
Risk Management’s
Management’s Benefits
Benefits
• A proactive rather than reactive approach.
• Reduces surprises and negative consequences.
• Prepares the project manager to take advantage
of appropriate risks.
• Provides better control over the future.
• Improves chances of reaching project performance
objectives within budget and on time.

7–6
 The
TheRisk
Risk
Management
Management
Process
Process

FIGURE 7.2

7–7
 Managing
Managing Risk
Risk
• Step 1: Risk Identification
– Generate a list of possible risks through brainstorming,
problem identification and risk profiling.
• Macro risks first, then specific events
• Step 2: Risk Assessment
– Scenario analysis for event probability and impact
– Risk assessment matrix
– Failure Mode and Effects Analysis (FMEA)
– Probability analysis
• Decision trees, NPV, and PERT
– Semiquantitative scenario analysis

7–8
The
TheRisk
RiskBreakdown
BreakdownStructure
Structure(RBS)
(RBS)

FIGURE 7.3

7–9
Partial
PartialRisk
RiskProfile
Profilefor
for Product
Product Development
Development Project
Project

FIGURE 7.4

7–10
Defined
DefinedConditions
Conditionsfor
forImpact
Impact Scales
Scales of
of aaRisk
Riskon
onMajor
Major
Project
Project Objectives
Objectives(Examples
(Examplesforfor negative
negativeimpacts
impactsonly)
only)

FIGURE 7.5

7–11
 Risk
RiskAssessment
Assessment Form
Form

Failure Mode and Effects Analysis (FMEA)

Impact × Probability × Detection = Risk Value
FIGURE 7.6

7–12
 Risk
Risk Severity
Severity Matrix
Matrix
Failure Mode and Effects Analysis (FMEA)
Impact × Probability × Detection = Risk Value

FIGURE 7.7

7–13
 Managing
Managing Risk
Risk (cont’d)
(cont’d)
• Step 3: Risk Response Development
– Mitigating Risk
• Reducing the likelihood an adverse event will occur.
• Reducing impact of adverse event.
– Avoiding Risk
• Changing the project plan to eliminate the risk or
condition.
– Transferring Risk
• Paying a premium to pass the risk to another party.
• Requiring Build-Own-Operate-Transfer (BOOT)
provisions.
– Retaining Risk
• Making a conscious decision to accept the risk.

7–14
 Contingency
Contingency Planning
Planning
• Contingency Plan
– An alternative plan that will be used if a possible
foreseen risk event actually occurs.
– A plan of actions that will reduce or mitigate the
negative impact (consequences) of a risk event.
• Risks of Not Having a Contingency Plan
– Having no plan may slow managerial response.
– Decisions made under pressure can be potentially
dangerous and costly.

7–15
 Risk
Risk and
and Contingency
Contingency Planning
Planning
• Technical Risks
– Backup strategies if chosen technology fails.
– Assessing whether technical uncertainties
can be resolved.
• Schedule Risks
– Use of slack increases the risk of a late project finish.
– Imposed duration dates (absolute project finish date)
– Compression of project schedules due to a shortened
project duration date.

7–16
Risk
Risk Response
Response Matrix
Matrix

FIGURE 7.8

7–17
 Risk
Risk and
and Contingency
Contingency Planning
Planning (cont’d)
(cont’d)
• Costs Risks
– Time/cost dependency links: costs increase when
problems take longer to solve than expected.
– Deciding to use the schedule to solve cash flow
problems should be avoided.
– Price protection risks (a rise in input costs) increase if
the duration of a project is increased.
• Funding Risks
– Changes in the supply of funds for the project can
dramatically affect the likelihood of implementation or
successful completion of a project.

7–18
 Opportunity
Opportunity Management
Management Tactics
Tactics
• Exploit
– Seeking to eliminate the uncertainty associated with an
opportunity to ensure that it definitely happens.
• Share
– Allocating some or all of the ownership of an opportunity to
another party who is best able to capture the opportunity for the
benefit of the project.
• Enhance
– Taking action to increase the probability and/or the positive
impact of an opportunity.
• Accept
– Being willing to take advantage of an opportunity if it occurs, but
not taking action to pursue it.

7–19
 Contingency
Contingency Funding
Funding and
and Time
Time Buffers
Buffers
• Contingency Funds
– Funds to cover project risks—identified and unknown.
• Size of funds reflects overall risk of a project
– Budget reserves
• Are linked to the identified risks of specific work
packages.
– Management reserves
• Are large funds to be used to cover major unforeseen
risks (e.g., change in project scope) of the total
project.
• Time Buffers
– Amounts of time used to compensate for unplanned
delays in the project schedule.
• Severe risk, merge, noncritical, and scarce resource
7–20
activities
 Contingency
Contingency Fund
Fund Estimate
Estimate ($000s)
($000s)

Note: In view of the general values of 5% to 10% of the project cost, it

must be stated that If cost estimates are not accurate or project is
such where the unknowns are present then the contingency funds can
be significantly higher TABLE 7.1

7–21
 Managing
Managing Risk
Risk (cont’d)
(cont’d)
• Step 4: Risk Response Control
– Risk control
• Execution of the risk response strategy
• Monitoring of triggering events
• Initiating contingency plans
• Watching for new risks
– Establishing a Change Management System
• Monitoring, tracking, and reporting risk
• Fostering an open organization environment
• Repeating risk identification/assessment exercises
• Assigning and documenting responsibility for
managing risk

7–22
 Change
Change Management
Management Control
Control
• Sources of Change
– Project scope changes
– Implementation of contingency plans
– Improvement changes

7–23
 Change
Change Control
Control System
System Process
Process
1. Identify proposed changes.
2. List expected effects of proposed changes
on schedule and budget.
3. Review, evaluate, and approve or disapprove
of changes formally.
4. Negotiate and resolve conflicts of change,
condition, and cost.
5. Communicate changes to parties affected.
6. Assign responsibility for implementing change.
7. Adjust master schedule and budget.
8. Track all changes that are to be implemented

7–24
The
TheChange
ChangeControl
Control
Process
Process

FIGURE 7.9

7–25
 Benefits
Benefits of
of aa Change
Change Control
Control System
System
1. Inconsequential changes are discouraged
by the formal process.
2. Costs of changes are maintained in a log.
3. Integrity of the WBS and performance measures
is maintained.
4. Allocation and use of budget and management
reserve funds are tracked.
5. Responsibility for implementation is clarified.
6. Effect of changes is visible to all parties involved.
7. Implementation of change is monitored.
8. Scope changes will be quickly reflected in baseline
and performance measures.

7–26
Sample
SampleChange
Change
Request
Request Form
Form

FIGURE 7.10

7–27
 Key
Key Terms
Terms

Avoiding risk Risk breakdown structure (RBS)

Budget reserve Risk register
Change management system Risk profile
Contingency plan Risk severity matrix
Management reserve Scenario analysis
Mitigating risk Sharing risk
Opportunity Time buffer
Risk Transferring risk

7–28