Intro to Project Management: Project Risk Management - Control Risks, Workarounds Risk Reassessment Audits

What This Is

Control Risks is a critical aspect of project management that involves identifying, assessing, and mitigating potential risks that could impact project objectives. Effective control of risks ensures that projects are delivered on time, within budget, and to the required quality standards. For instance, consider a construction project where a risk assessment reveals that a potential flood could delay the project. The project manager would implement control measures, such as installing flood barriers or relocating critical equipment, to minimize the risk of flooding and ensure the project stays on track.

Key Terms & Formulas

• Risk Register: A document that captures and tracks identified risks, their likelihood, impact, and mitigation strategies.
• Risk Matrix: A tool used to categorize risks based on their likelihood and impact, helping to prioritize mitigation efforts.
• Risk Appetite: The level of risk that an organization or project is willing to accept.
• Risk Tolerance: The level of risk that an organization or project is willing to accept, taking into account its risk appetite and other factors.
• Workaround: A temporary or permanent solution to a risk or problem that does not require a full-scale change to the project plan.
• Risk Reassessment: The process of reviewing and updating the risk register to reflect changes in risk likelihood, impact, or mitigation strategies.
• Audit: A formal examination of a project's processes, procedures, and performance to ensure compliance with organizational policies and standards.
• Audit Trail: A record of all changes made to a project's documentation, including risk assessments and mitigation strategies.
• Root Cause Analysis (RCA): A method used to identify the underlying causes of a problem or risk, rather than just its symptoms.
• SWOT Analysis: A tool used to identify the Strengths, Weaknesses, Opportunities, and Threats associated with a project or risk.
• Decision Tree: A visual representation of the possible outcomes of a decision, helping to identify the most likely outcome and the associated risks.

Step-by-Step / Process Flow

1. Identify Risks: Use tools like SWOT analysis, brainstorming, and risk matrices to identify potential risks that could impact the project.
2. Qualify Risks: Assess the likelihood and impact of each identified risk using a risk matrix or other tools.
3. Plan Responses: Develop mitigation strategies for high-priority risks, including workarounds, contingency plans, and risk-reducing actions.
4. Monitor Risks: Regularly review and update the risk register to reflect changes in risk likelihood, impact, or mitigation strategies.
5. Review and Update: Conduct regular risk reassessments to ensure that the risk management plan remains effective and up-to-date.

Common Mistakes

• Mistake: Failing to identify and document risks, leading to inadequate risk management.
• Correction: Regularly conduct risk assessments and maintain a comprehensive risk register to ensure that all potential risks are identified and addressed.
• Mistake: Focusing solely on high-probability risks, neglecting low-probability but high-impact risks.
• Correction: Use a risk matrix or other tools to prioritize risks based on both likelihood and impact.
• Mistake: Failing to communicate risk information to stakeholders, leading to misunderstandings and misaligned expectations.
• Correction: Regularly update stakeholders on risk status and mitigation strategies to ensure that everyone is informed and aligned.

Exam Tips

• Tip: Be prepared to explain the difference between risk appetite and risk tolerance, and how they relate to each other.
• Tip: Understand the concept of a risk register and its importance in risk management.
• Tip: Be able to describe the steps involved in conducting a risk reassessment, including identifying changes in risk likelihood or impact.

Quick Practice Questions

1. If a project has a risk with a likelihood of 0.6 and an impact of $100,000, and the risk is not mitigated, what is the expected monetary value of this risk? Answer: $60,000 (0.6 x $100,000). Explanation: The expected monetary value of a risk is calculated by multiplying its likelihood by its impact.

2. A project manager is conducting a risk reassessment and identifies a new risk with a likelihood of 0.8 and an impact of $50,000. What should the project manager do next? Answer: Update the risk register to reflect the new risk and its associated likelihood and impact. Explanation: Regular risk reassessments are essential to ensure that the risk management plan remains effective and up-to-date.

3. If a project has a cost performance index (CPI) of 0.8, what does this indicate about the project's cost performance? Answer: The project is under budget. Explanation: A CPI of 0.8 indicates that the project is spending less than planned, resulting in a cost savings.

Last-Minute Cram Sheet

• Risk Register: A document that captures and tracks identified risks, their likelihood, impact, and mitigation strategies.
• Risk Matrix: A tool used to categorize risks based on their likelihood and impact.
• Risk Appetite: The level of risk that an organization or project is willing to accept, not to be confused with risk tolerance.
• Workaround: A temporary or permanent solution to a risk or problem that does not require a full-scale change to the project plan.
• Risk Reassessment: The process of reviewing and updating the risk register to reflect changes in risk likelihood, impact, or mitigation strategies.
• Audit: A formal examination of a project's processes, procedures, and performance to ensure compliance with organizational policies and standards.
• Root Cause Analysis (RCA): A method used to identify the underlying causes of a problem or risk, rather than just its symptoms.
• SWOT Analysis: A tool used to identify the Strengths, Weaknesses, Opportunities, and Threats associated with a project or risk.
• Decision Tree: A visual representation of the possible outcomes of a decision, helping to identify the most likely outcome and the associated risks.