SlideShare a Scribd company logo
1 of 64
IBM Global Services (ITS)
10/30/15 © 2004 IBM Corporation
Risk Management Fundamentals
and Beyond
Dr. Oliver Klapp
IBM Global Services (ITS)
© 2004 IBM Corporation
2 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning VITPM 4.12
Risk Categories: Risk Identification VITPM4.13
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning VITPM 4.15
Risk Categories: Risk Monitoring and Control VITPM 6.6
6
7
8
9
VITPM 4.14
IBM Global Services (ITS)
© 2004 IBM Corporation
3 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning
Risk Categories: Risk Identification
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning
Risk Categories: Risk Monitoring and Control
6
7
8
9
IBM Global Services (ITS)
© 2004 IBM Corporation
4 Risk Management Fundamentals 10/30/15
What is Risk Management?
 Risk Management is the systematic process of identifying,
analyzing and responding to project risk. (PMBOK Guide)
 It includes [maximizing the probability and consequences of
positive events and] minimizing the probability and consequences
of adverse events to project objectives.
IBM Global Services (ITS)
© 2004 IBM Corporation
5 Risk Management Fundamentals 10/30/15
 IBM defines Risk as 'a possible undesirable and unplanned event that
could result in the project not meeting one or more of its objectives'
 PMI further defines risk as involving only the possibility of suffering harm
or loss. (PMBOK)
 Synonyms for risk include danger, jeopardy, hazard, peril, gamble, chance
(MS Word Thesaurus)
deutsch: Gefahr, GefĂ€hrlichkeit, Wagnis, GlĂŒcksfall, Unsicherheit, 

 Thus, Risk Management can be defined as ‘the art and science of
identifying, analysing and responding to risk events.' (PMBOK)
Risk Management Definitions
IBM Global Services (ITS)
© 2004 IBM Corporation
6 Risk Management Fundamentals 10/30/15
Impact
Probability
Low
Impact
High Impact
Low Probability
High
Probability
Low Risk
Moderate
Risk
High Risk
An Event
A risk event is defined as a
possible undesirable event
or unplanned opportunity.
All projects have risks. If
risks are ignored you will
increase the likelihood that
the project will fail, or will
be less successful.
What is Risk
IBM Global Services (ITS)
© 2004 IBM Corporation
7 Risk Management Fundamentals 10/30/15
Risk versus Issues
 Risks is when an event may occur
– Risk management allows for proactive management
– It allows customer expectation management early
– Financial impacts may be avoided
 Issue is when a risk has eventuated (a fact, e.g. PMRs)
– Reactive management approach
– Issue results in loss – financial or customer satisfaction
IBM Global Services (ITS)
© 2004 IBM Corporation
8 Risk Management Fundamentals 10/30/15
Risk vs. Change vs. Issue Management
 Risks Management
– A strategic process for identifying and managing possible future
events that may influence project performance and results
 Change Management
– A process to formally control the management and approval of
project baselines (requirements, technical, schedule and so on) and
changes to those baselines
 Issue Management
– A tactical process to formally control the management of problems
that typically result from risk, change, ineffective project
management, or a combination of these
IBM Global Services (ITS)
© 2004 IBM Corporation
9 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning
Risk Categories: Risk Identification
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning
Risk Categories: Risk Monitoring and Control
6
7
8
9
IBM Global Services (ITS)
© 2004 IBM Corporation
10 Risk Management Fundamentals 10/30/15
Why is Risk Management Important, Why Focus on Risk
Management?
 Through managing uncertainty, effective risk management:*
– Protect:
‱ Spend (GP), cost
‱ Schedule
‱ Requirements
– Prevent surprises
– Prevent management by crisis
– Prevent problems from occurring or, if they do occur, from escalating
– by organizational appreciation of uncertainty, increases
competitiveness in bidding and reduces chance of disaster
contracts/projects (can you think of any?) where risk is too great.
– helps build good employee morale by encouraging creative thinking,
cross team communication and trust.
– And much more!
*Chapman, Chris and Steve Ward (1996). Why You Need Risk Management. Project Management
Requirements
Cost Schedule
IBM Global Services (ITS)
© 2004 IBM Corporation
11 Risk Management Fundamentals 10/30/15
Project risk and consequences vary over the project life cycle
Risk
Time
Total Project Life Cycle
Conceive Develop Implement Terminate
Amount of Stake
Opportunity and Risk
Period of
Highest Risk
Impact
$ Value
IBM Global Services (ITS)
© 2004 IBM Corporation
12 Risk Management Fundamentals 10/30/15
Risk Management Planning
Approach on how to manage risks in the project
Risk Identification
Determining the risks that may affect the project and documenting
characteristics (consider validity of assumptions)
Qualitative Risk Analysis
Qualitative Analysis and prioritising its effects
Quantitative Risk Analysis
Measuring the probability of impact
Estimating the cost of impact
Risk Response Planning
Developing procedures and techniques to reduce the threat of risks and
enhance opportunities
Risk Monitoring and Control
Ongoing management of risks during project execution
Analyse Respond Control ReactIdentify
Scope of Risk Management
IBM Global Services (ITS)
© 2004 IBM Corporation
13 Risk Management Fundamentals 10/30/15
Risk Process PMBOK 2003
11.1 Risk Management Planning
– deciding how to approach, plan, and execute the risk management activities for a
project.
11.2 Risk Identification
– determining which risks might affect the project and documenting their characteristics.
11.3 Qualitative Risk Analysis
– prioritizing risks for subsequent further analysis or action by assessing and combining
their probability of occurrence and impact.
11.4 Quantitative Risk Analysis
– numerically analyzing the effect on overall project objectives of identified risks.
11.5 Risk Response Planning
– developing options and actions to enhance opportunities, and to reduce threats to
project objectives.
11.6 Risk Monitoring and Control
– tracking identified risks, monitoring residual risks, identifying new risks, executing risk
response plans, and evaluating their effectiveness throughout the project life cycle.
IBM Global Services (ITS)
© 2004 IBM Corporation
14 Risk Management Fundamentals 10/30/15
Project Risk Management Process Flow Diagram
IBM Global Services (ITS)
© 2004 IBM Corporation
15 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning
Risk Categories: Risk Identification
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning
Risk Categories: Risk Monitoring and Control
6
7
8
9
IBM Global Services (ITS)
© 2004 IBM Corporation
16 Risk Management Fundamentals 10/30/15
Risk Management Planning
 Plan the next phases/categories
 PMI lists the following inputs to Project Risk Management Planning
to create the risk management plan:
– Project Charter  Teilprojektbeschreibungsdokumente
– Organization’s risk management policies
– Defined roles and responsibilities
– Stakeholder risk tolerances
– Template for the organization’s risk management plan  FitPM
– Work breakdown structure  ProjektplĂ€ne
 The main tool used is “planning meetings”.
IBM Global Services (ITS)
© 2004 IBM Corporation
17 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning
Risk Categories: Risk Identification
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning
Risk Categories: Risk Monitoring and Control
6
7
8
9
IBM Global Services (ITS)
© 2004 IBM Corporation
18 Risk Management Fundamentals 10/30/15
Risk Identification
 Inputs to risk identification:
– risk management plan
– items from project planning
– risk categories/types
– historical information
 The products of risk identification are risks, triggers, and inputs to
other processes (further action, etc.).
 Should not only be performed at the beginning of the project, but
also throughout the project’s life.
IBM Global Services (ITS)
© 2004 IBM Corporation
19 Risk Management Fundamentals 10/30/15
The key tools and techniques to use to identify risks are:
ïź Run a risk identification workshop (cross section of the project's
stakeholders)
ïź Peer reviews
ïź Review the risk assessment checklists created by the organization
ïź Interview key members of the project team
ïź Assumption analysis
ïź Examine sources of risk
ïź Study Lessons Learned from previous projects
Analyse Respond Control ReactIdentify
Risk Identification Tools and Techniques
IBM Global Services (ITS)
© 2004 IBM Corporation
20 Risk Management Fundamentals 10/30/15
Using Inputs to Identify Risk Events/Sources of Risk
 Work breakdown structure / ProjektplĂ€ne
 Contractual requirements or statements of work (SOWs), E-Vorlage
 Supplier contracts or customer agreements
 Field and marketing information
 Project plan assumptions
 Earned value (EV) data
 Lessons learned files from previous projects
 Company objectives and plans
 Other project-related plans
 Project schedule
 Review reports
 Project plan dependencies
 Resource sourcing !!!
 Sponsor or other stakeholder feedback
 As you progress on the project, some other areas to look at are:
 Change requests, Issue documents, Event log, Project status reports
IBM Global Services (ITS)
© 2004 IBM Corporation
21 Risk Management Fundamentals 10/30/15
Identify the Risk StatementIdentify the Risk Statement
 Beispiel: Performanz nach Konsolidierung Karat
-> Prob M, impact VH vs. M / M; Warum?
 Risks are described as having three parts:
– If <condition> and <dependency exists> then <impact will occur>
– If <condition>
‱ The event under which the risk will materialize
– e.g., IF GeeWiz Inc. does not deliver the Oracle interface by
November 2001.
– And <dependency>
‱ The reason for the project’s dependence on the risk
– e.g., AND it becomes necessary to develop an interface from
scratch.
– Then <impact>
‱ The quantifiable impact of the realized risk
– e.g., THEN our schedule will slip by 3 months and our costs will
exceed our budget by 10%.
IBM Global Services (ITS)
© 2004 IBM Corporation
22 Risk Management Fundamentals 10/30/15
Further Examples of Risk Statements
 IF the roof leaks because of the constant snowfalls, AND the project
team will be evacuated from the trailer, THEN we will not be able to
deploy data on schedule.
 IF I violate traffic rules, AND get one more ticket, THEN my insurance
company will drop me.
 IF loan is not approved by May, AND we cannot move into new house,
THEN we will have to extend our rent.
IBM Global Services (ITS)
© 2004 IBM Corporation
23 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning
Risk Categories: Risk Identification
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning
Risk Categories: Risk Monitoring and Control
6
7
8
9
IBM Global Services (ITS)
© 2004 IBM Corporation
24 Risk Management Fundamentals 10/30/15
Qualitative Risk Analysis
 Inputs:
– the risk management plan
– identified risks
– project status (early in life, later in life), project type (common,
uncommon), data precision, scales of probability and impact, and
assumptions.
 Tools used:
– applying risk probability and impact to individual risks
– a risk rating matrix that combines probability and impact of risks (such
as “low”, “moderate”, “high”)
 Qualitative risk analysis produces an overall risk ranking for the
project, list of risks for additional analysis and management, and
trends in qualitative risk analysis results.
IBM Global Services (ITS)
© 2004 IBM Corporation
25 Risk Management Fundamentals 10/30/15
When analysing the risk, consider the:
Probability of occurrence
Magnitude of loss or impact of each identified risk event
Severity of risk (Severity = Probability x Impact)
Evaluation factors include:
Precedence (Has the risk occurred before?)
Familiarity of operation (Has the work been undertaken before?)
Resources and skills
Time, cost, and quality
Probability (What is the likelihood of the risk occurring?)
Impact (What is the effect on the project or business?)
Win, Profit, Customer Satisfaction  Overall
Analyse Respond Control ReactIdentify
Evaluation of Risk
IBM Global Services (ITS)
© 2004 IBM Corporation
26 Risk Management Fundamentals 10/30/15
Example: Define consequences/impact
Analyse
Consequence
Probability
Consequence Area Definition
Cost Entail budget overrun on more than 1 mill EURO in
<name on project>
High Time Entail that <name on project> is delayed more than 1
week
Quality Entail that subsequent projects can not be started
Cost Entail budget overrun on less than 1 mill EURO but
more than 0,1 mill EURO in <name on project>
Medium Time Entail that <name on project> is delayed less than 1
week but more than 1 day
Quality Entails that subsequent projects has considerable
negative influences
Cost Entail budget overrun less than 0,1 mill EURO in
<name on project>
Low Time Entail that <name on project> is delayed less than 1
day
Quality Entails that subsequent projects only has minor
negative influences
IBM Global Services (ITS)
© 2004 IBM Corporation
27 Risk Management Fundamentals 10/30/15
Risk Exposure Matrix
Exposure
Rating
Very High High Medium Low
Very High
High
Medium
Low
VH
VHVH
LH
HH
HH
HH
MM
M
M
M
Overall Impact
Probability
 overall impact: highest of each of the impact categories, e.g. L L M -> M
IBM Global Services (ITS)
© 2004 IBM Corporation
28 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning
Risk Categories: Risk Identification
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning
Risk Categories: Risk Monitoring and Control
6
7
8
9
IBM Global Services (ITS)
© 2004 IBM Corporation
29 Risk Management Fundamentals 10/30/15
Quantitative Risk Analysis
 Create a prioritized list of quantified risks, probabilistic analysis of the
project’s duration and costs, probability of achieving cost and time
targets, and trends.
 This is performed by the use of
– the risk management plan,
– identified risks,
– list of prioritized risks,
– list of risks for further analysis and management,
– historical information,
– expert judgment,
– and other inputs along with the tools of interviewing, sensitivity
analysis, decision tree analysis, and simulation.
IBM Global Services (ITS)
© 2004 IBM Corporation
30 Risk Management Fundamentals 10/30/15
Comparative Risk Ranking Tool
 Es werden den Risiken Buchstaben zugeordnet (möglichst nicht mehr als 5 bis 10 Risiken).
 Danach werden diese Risiken in unten stehende Tabelle eingetragen.
 Dann werden die Risiken in den einzelnen Stufen miteinander verglichen und der entsprechende
Buchstabe in die freien Felder eingetragen.
 Das Programm rechnet dann automatisch das am meisten genannte Risiko und man erhĂ€lt das
entsprechende Risk-Ranking.
 Achtung: Es darf nicht sein, dass ein zwei oder mehrere Risiken das gleiche Ranking besitzen, da
jedes Risiko mit jedem anderen verglichen wird!
3 A A
1 B a B'
4 C a a C'
2 D b D'
0 E c c N
0 F c F'
0 G c G'
0 H d H'
0 I d I'
0 J J'
Ranking A B C D E F G H I J
2 4 1 3 5 5 5 5 5 5
IBM Global Services (ITS)
© 2004 IBM Corporation
31 Risk Management Fundamentals 10/30/15
AnalyzeAnalyze Time Frame and FrequencyTime Frame and Frequency
 Time FrameTime Frame
the period and/or points in time when risk consequences might
impact the project.
*Timing is relative to the expected length of the project.
 FrequencyFrequency
Characteristics of a risk which are likely to occur multiple times
throughout the project.
(e.g. das Thema Ressourcen jedes Quartal)
Near-term: Less than 30 days
Mid-term: Between 30 – 90 days
Far-term: Greater than 90 days
IBM Global Services (ITS)
© 2004 IBM Corporation
32 Risk Management Fundamentals 10/30/15
Assign Risk Ownership
In determining risk assignment consider:
 Accountability – who is ultimately held “accountable” for
determining the risk approach, as well as the success or failure
of mitigation and/or use of contingency plans.
 Responsibility – who is charged with developing and
implementing (or overseeing) risk mitigation actions and/or use
of contingency plans.
 Authority – who has the right and ability to assign resources for
mitigation and/or contingency
IBM Global Services (ITS)
© 2004 IBM Corporation
33 Risk Management Fundamentals 10/30/15
Risk Log 1/2
Ris
k ID
TP Kategorie Beschreibung Zeitl.
AusprÀ
gung
Eintritt
s-
wÂŽkeit
(pre)
Impa
kt
(pre)
Score/
Exposu
re
(pre)
Score zur
Berechnung
nomalized risk
score
Strategie
1 Alg PMgmt Wenn die erforderlichen Ressourcen nicht bereitgestellt werden, fĂŒhrt dies zu Verzögerungen im Projekt. VH H VH 14 Eingrenzen
10 App/
DB
extern Wenn Probleme mit Fremd-SW entstehen, besteht eine hohe AbhÀngigkeit zu den Softwarelieferanten und deren
Support.
H M H 9 Accept
11 INET technisch Wenn keine Anpasssung der Domino- und Websphere basierten Applikationen auf Websphere Release 5.X
erfolgt, ist keine Konsolidierung vertretbar möglich.
M M M 5 Eingrenzen
12 INET technisch Wenn keine Migration der Applikationen auf WebSphere 5.X erfolgt, kann die Anzahl der Applikationen und
Server im Bereich Domino/WebSphere Applikationsserver nicht verringert werden.
M M M 5 Eingrenzen
14 Alg organisatorisch Wenn die Akzeptanz bei laufenden Projekten und in den Referaten gegenĂŒber SOKO nicht besteht, sind Termine
und Zielsetzungen gefÀhrdet.
VH H VH 14 Eingrenzen
15 App technisch Wenn die Zielsystemauslastung suboptimal gefĂŒhrt wird, sind die Zielzahlen gefĂ€hrdert. L M M 5 accept
16 App technisch Wenn Cohosting durchgefĂŒhrt wird, kann dies zu Destabilisierung, ohne vorheriges Monitoring sogar zum
Serverausfall fĂŒhren.
L M M 5 accept
19 Alg organisatorisch Wenn SOKO relevante MA das Zeit Plus Programm annehmen, kommt es zu starken Terminproblemen. VH H VH 14 accept
23 App organisatorisch Abstimmung TP APP mit Serverbetrieb kann die In-Produktionnahme von Apps verhindern / verzögern
(Workshop war am 14.6. , bis jetzt sind immer noch nicht Betriebs-MA benannt
H M H 9 accept
24 App technisch Wenn erhöhte Anforderungen an Zielsystem-Messungen und oder andere Verfahren vor einer in-
Produktionnahme (eigentlich alle Anforderungen ungleich den im BC angenommenen) entstehen, erhöhen sich
die AufwÀnde und es kann zu Terminverschiebungen kommen.
H H H 9 eingrenzen
IBM Global Services (ITS)
© 2004 IBM Corporation
34 Risk Management Fundamentals 10/30/15
Risk Log 2/2
Strategie Maßnahmen Eintritts-
wÂŽkeit
(post)
Impakt
(post)
Score/
Exposu
re
(post)
Score zur
Berechnung
nomalized risk
score
Originator Datum
Aufnahme
Owner Status Links to
Issue/OP ID
Eingrenzen o quartalsweise Abstimmung der Ressourcen mit den RLs; o
bei punktuellen EngpÀssen Einsatz externer Ressourcen
o persönliche Ansprache der RLs durch die Projektleitung
o Kommunikation der möglichen Projektmitarbeiter die Zeitplus
planen, um Zeit fĂŒr alternative Lösungen zu bekommen.
H M H 9 alle PM ongoing
Accept Risiko ist im BC berĂŒcksichtigt. Als Maßnahme bleibt die
Überwachung der Abbauzahlen
H L M 5 PM/Architektongoing
Eingrenzen GesprÀch PL in HH 28./29.10. in HH M M M 5 Horneff Architekt ongoing
Eingrenzen GesprÀch PL in HH 28./29.10. in HH M M M 5 Horneff Architekt ongoing
Eingrenzen o persönliche Kontakte zu Linienverantwortlichen und
Projektleitern pflegen
o Sichtbarkeit des Topsponsors/Managements fĂŒr das Projekt
nach außen
o Initiierung von PersonalgesprÀchen
H M H 9 Kern PM ongoing
accept Im BC berĂŒcksichtigt L M M 5 G.S. Architekt offen
accept Accept, da nicht fĂŒr alle Services Abnahmeumgebungen
vorhanden sind
L M M 5 G.S. Architekt offen
accept siehe Risiko 1 VH L H 9 PM (O.K.) PM ongoing
accept H M H 9 eingetreten siehe OP 24
eingrenzen regelmĂ€ĂŸige Abstimmungen zwischen SOKO-Architektur und
Betrieb
rollierender 3Monatsplan der TPL mit Betrieb regelmĂ€ĂŸig
abstimmen
Performancemessung stÀrken
M M M 5 ongoing
IBM Global Services (ITS)
© 2004 IBM Corporation
35 Risk Management Fundamentals 10/30/15
Summary Risk Analysis
 Analyse: transform risk data into decision making information
 Define probability
 Define impact (e.g.for Win, Profit, Satisfaction)
 Overall impact: highest of each of the impact categories,
e.g. L L M -> M
 Risk Exposure: “product” probability and overall impact (s. matrix)
 Scale for impacts and probability: low, medium, high, very high
 Prioritisation/Ranking (s. e.g. comparative risk ranking)
IBM Global Services (ITS)
© 2004 IBM Corporation
36 Risk Management Fundamentals 10/30/15
Normalized Project Risk Scoring:
 Rate exposure of each risk:
2 (low), 5(medium), 9(high), 14 (very high)
 Sum all scores (getrennt nach Impact Kategorien und overall)
 normalized score = sum of risk scores * 10 / number of risks
(risks no longer considered must still be listed as “low”, otherwise the
overall risk will be too high)
 OVERALL RISK EXPOSURE
– 21–40 = Low
– 41–60 = Medium
– 61–80 = High
– 81+ = Very High
IBM Global Services (ITS)
© 2004 IBM Corporation
37 Risk Management Fundamentals 10/30/15
Normalization: Use, Strengths, and Weaknesses
 Use:
– Qualitative elements must be weighted
 Strengths:
– Helps with comparison of different projects
– Allows for comparison of risk categories (e.g. Win, Profit, Customer
Satisfaction)
 Weaknesses:
– Tends to result in „High“ overall risk, especially if only few risks are
used
– All identified risks must be retained, including those no longer
considered
‱ Risks no longer be considered must be listed as „Low“, otherwise
the overall risk will be to high
– The result is easy to manipulate
IBM Global Services (ITS)
© 2004 IBM Corporation
38 Risk Management Fundamentals 10/30/15
Risk Analysis Tools
 Monte Carlo simulation and Sensitivity Analysis
aid the project management community in determining which variables of a
project most impact the project’s possible outcomes, and by how much.
 For example, using Monte Carlo simulation one can obtain statistical
probabilities of project variable’s impact on the overall project expected value
(such as, maximum and minimum impact of a variable on the project’s expected
value).
 From this information on project variables impact, a tornado diagram could be
created to analyze all variables to identify which ones should be kept as a priority
to focus on to manage the project’s outcome.
IBM Global Services (ITS)
© 2004 IBM Corporation
39 Risk Management Fundamentals 10/30/15
Risk Analysis Tools
Sensitivity Analysis - Tornado Diagram
IBM Global Services (ITS)
© 2004 IBM Corporation
40 Risk Management Fundamentals 10/30/15
Risk Analysis Tools
Decision Tree with EMV (Expected Monetary Value)
IBM Global Services (ITS)
© 2004 IBM Corporation
41 Risk Management Fundamentals 10/30/15
Risk Analysis Tools
Pareto Analysis
 80/20 Rule
 Examples*
– 20% of your customers provide 80% of your sales
– 20% of your products provide 80% of your sales
– 20% of your products provide 80% of your profit
– 20% of your products provide 80% of your problems
 Useful for*:
– Prioritizes and focuses resources where they are most needed.
– Measures the impact of an improvement by comparing before and
after.
– Visually displays the relative importance of causes, problems or
other conditions.
IBM Global Services (ITS)
© 2004 IBM Corporation
42 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning
Risk Categories: Risk Identification
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning
Risk Categories: Risk Monitoring and Control
6
7
8
9
IBM Global Services (ITS)
© 2004 IBM Corporation
43 Risk Management Fundamentals 10/30/15
 Avoid
 Accept
 Transfer
 Contain (kann neue Risiken erzeugen):
– Mitigation, specific actions to lower impact, probability or both
(wir tun was, die Kosten fallen jetzt an)
– Risk contingency planning, prepare a plan of action
(nur Plan vorbereiten fĂŒr den Fall, falls das Risiko eintritt)
 Insure
 Risk Reserve
– Risk contingency reserve (within project budget)
– Risk management reserve (outside project budget)
Analyse Respond Control ReactIdentify
Risk Response Planning Strategies
IBM Global Services (ITS)
© 2004 IBM Corporation
44 Risk Management Fundamentals 10/30/15
Factors to Consider When Planning Risk Response
 Many factors influence the selection of a risk mitigation strategy,
including:
‱ Project phase and application
‱ Size
‱ Priority
‱ Complexity
‱ Expense
‱ Time available
‱ Required level of detail
‱ Ease of use
‱ Resource availability
‱ Contract type
‱ Terms and conditions
‱ The project manager's authority, accountability, and ability
‱ Commitment from the project manager and upper management
‱ Customer satisfaction
IBM Global Services (ITS)
© 2004 IBM Corporation
45 Risk Management Fundamentals 10/30/15
Risk Response Sheet
Response
strategy
Response actions Cost Effec. New risk as a result of the strategy
Accept none VG
Avoid
Transfer
Insure
Contain
Mitigate
Contain:
risk cont.
plan
Risk
reserve
Select best strategies: cost/effectiveness/new risk technique
(VG: very good, G: good, NG: not good)
reassess project risk – post response -> new impacts, probabilities, exposures,
normalized score
IBM Global Services (ITS)
© 2004 IBM Corporation
46 Risk Management Fundamentals 10/30/15
Impact of Different Risk Options
IBM Global Services (ITS)
© 2004 IBM Corporation
47 Risk Management Fundamentals 10/30/15
Remove high risk element(s) from proposal
Add assumptions to define boundaries of task / function / risk
Add appropriately skilled resources
Transfer responsibility to the customer - but be careful that customer
has the capability and commitment to perform (z.B. GBA !!)
Recommend phased development approach
Integrate special checkpoints by management
Include Level of Effort (LOE) tasks
Examine alternatives
Develop containment & contingency plans
Risk: Containment Actions
IBM Global Services (ITS)
© 2004 IBM Corporation
48 Risk Management Fundamentals 10/30/15
Ensure assumptions are accurate
Establish firm baseline
Detailed change control / management
Assume risk but add premium
Document analysis, tradeoffs, decisions
Contact other QA representatives for ideas
NOTE: Having a contingency plan does
not necessarily reduce the risk rating
Risk: Containment Actions (continued)
IBM Global Services (ITS)
© 2004 IBM Corporation
49 Risk Management Fundamentals 10/30/15
Risk Triggers
 An important part of defining the risk containment plans is risk triggers.
 Risk triggers are indicators that specify when an action needs to be
taken. The format for defining risk triggers is as follows: If the trigger
event happens, then initiate the action plan.
 Examples of triggers and action plans include:
‱ If the power is out for more than 30 minutes, start using the
generator.
‱ If the product delivery from the OEM vendor is n days late, then
contact the other vendors to move their shipments back.
 Effective triggers:
‱ Provide an early warning, which gives the team enough time to
take appropriate action or focus extra attention on the risk
‱ Do not initiate actions unnecessarily
‱ Are easy to calculate and report
IBM Global Services (ITS)
© 2004 IBM Corporation
50 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning
Risk Categories: Risk Identification
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning
Risk Categories: Risk Monitoring and Control
6
7
8
9
IBM Global Services (ITS)
© 2004 IBM Corporation
51 Risk Management Fundamentals 10/30/15
Risk Monitoring and Control
 Workaround plans, corrective action, project change requests, updates
to the risk response plan, a risk database (repository for information),
and updates to the risk identification checklists are all products of risk
monitoring and control.
 Products from previously-discussed processes are used to create
these products (risk management plan, risk response plan) as well as
project communication, additional risk identification and analysis (as
part of the overall “Controlling” process), and scope changes.
 Tools and techniques used are project risk response audits, periodic
risk reviews, earned value analysis, technical performance
measurement and additional risk response planning.
 Watching and periodically reevaluating the risk for changes
IBM Global Services (ITS)
© 2004 IBM Corporation
52 Risk Management Fundamentals 10/30/15
Questions to Consider
 Is the risk still possible / Is the event still risk?
 Is the probability still the same?
 Is the impact still the same?
 Is the teamsÂŽs tolerance still the same?
 Are there new risks?
IBM Global Services (ITS)
© 2004 IBM Corporation
53 Risk Management Fundamentals 10/30/15
Risk Tracking and Control
 Critical success factors:
– execute the process
– reflect response strategies/actions in the
WBS
– develop alternatives
– communicate, get buy-in on selected
alternatives
– execute the action plan
 Triggers:
– regular assessment
– key events
– Suppliers
– key changes
– human resources
– Technical
– Customer
– Competition
– other environmental changes
 Risk Reaction
– analyse the impact of the risk occurrence
– update risk history
– 

IBM Global Services (ITS)
© 2004 IBM Corporation
54 Risk Management Fundamentals 10/30/15
Risk Closure
 Document the rationale for closure
 Focus on information that can be used later, either within the
current project or by future projects. Example of the type of
information to be captured include:
– Successful containment plans and why they were successful
– Failed containment plans and the reason for that failure
– Risk relationships and dependencies that were not obvious
– Relevant data from various analyses, especially costs and benefits of
mitigation plans
 Close the risk and update the status.
IBM Global Services (ITS)
© 2004 IBM Corporation
55 Risk Management Fundamentals 10/30/15
Agenda
1
2
3
4
What is Risk Management?
Why is Risk Management Important?
Risk Categories: Risk Management Planning
Risk Categories: Risk Identification
5 Risk Categories: Qualitative Risk Analysis
Risk Categories: Quantitative Risk Analysis
Recommendations and Summary
Risk Categories: Risk Response Planning
Risk Categories: Risk Monitoring and Control
6
7
8
9
IBM Global Services (ITS)
© 2004 IBM Corporation
56 Risk Management Fundamentals 10/30/15
Summary
 Risk Management is iterative and continuous process for the life of a
project.
 It is concerned with identifying, analyzing and responding to project risks.
 The benefit of risk management process is safeguards that you have
done your best to minimize the probability and consequences of adverse
events.
 It’s a standard part of project management because it helps to make
educated decisions that are vital to the project success.
IBM Global Services (ITS)
© 2004 IBM Corporation
57 Risk Management Fundamentals 10/30/15
Recommendations
 Risk identification needs more focus during the controlling process
(during the project’s execution).
 Positive risks need to be identified and managed to optimize project
success. (z.B. Image over IP)
 Tools such as sensitivity analysis (tornado diagrams), utility functions,
influence diagrams, decision trees, and SMART analysis could aid risk
identification and quantification.
 Involvement of program-level management in individual project risk
management oversight would ensure the same level of risk management
across program projects. Enforcement of the expected risk behavior and
minimum standards for risk management could be increased at the
project-level.
 Increased priority and time available for risk management tasks at the
project-level could be implemented by program management.
IBM Global Services (ITS)
© 2004 IBM Corporation
58 Risk Management Fundamentals 10/30/15
Identify and understand risk event
Plan to handle risk events
Incorporate Risk Management into the Project Management Planning
Process
Use the right strategies (for example, containment or contingency) to fit
the situation
Monitor risk events on a regular basis
Reassess events after each risk event
Don't try to do it
SOLO
The Project Managers Role in Risk Management
IBM Global Services (ITS)
© 2004 IBM Corporation
59 Risk Management Fundamentals 10/30/15
IBM Global Services (ITS)
© 2004 IBM Corporation
60 Risk Management Fundamentals 10/30/15
Backup
IBM Global Services (ITS)
© 2004 IBM Corporation
61 Risk Management Fundamentals 10/30/15
Risk Identification Workshop
– Identification
– Prioritisation
– Quantification
– Response Development
– Mitigation Strategy
– Control
IBM Global Services (ITS)
© 2004 IBM Corporation
62 Risk Management Fundamentals 10/30/15
Utility Theory
 Suppose that, after some questioning, the builder is able to make the
following statements:
 'I am indifferent between receiving $120,000 for certain or entering a
lottery that will give me a 0.9 probability of $150000 and a 0.1
probability of winning $0.‚
 'I am indifferent between receiving $100,000 for certain or entering a
lottery that will give me a 0.85 probability of winning $150 000 and a
0.15 probability of winning $0.‚
 'I am indifferent between receiving $80,000 for certain or entering a
lottery that will give me a 0.75 probability of winning $150 000 and a
0.25 probability of winning $0.'
IBM Global Services (ITS)
© 2004 IBM Corporation
63 Risk Management Fundamentals 10/30/15
Risk Analysis Tools
Utility Theory – Risk Adverse/Neutral/Seeking
 risk adverse for dollar values below $100,000, but is a risk seeker at higher dollar values (above
$100,000). This is because the utility plot shows convex curvature at higher dollar values, and
concave curvature at lower dollar values.
IBM Global Services (ITS)
© 2004 IBM Corporation
64 Risk Management Fundamentals 10/30/15
Risk Analysis Tools
Decision Tree with Expected Utility
 KontrĂ€res Ergebnis zum Decision Tree mit EVM

More Related Content

What's hot

Software Engineering Risk Management Software Application
Software Engineering Risk Management   Software ApplicationSoftware Engineering Risk Management   Software Application
Software Engineering Risk Management Software Application
guestfea9c55
 
Strategic risk management
Strategic risk managementStrategic risk management
Strategic risk management
rejoysirvel
 
Bertrand's Individual Essay
Bertrand's Individual EssayBertrand's Individual Essay
Bertrand's Individual Essay
Prince Bertrand
 
Software Project Risk Management Practice in Oman
Software Project Risk Management Practice in OmanSoftware Project Risk Management Practice in Oman
Software Project Risk Management Practice in Oman
EECJOURNAL
 
Risk management
Risk managementRisk management
Risk management
Naveen Menon
 
Risk management in Software Industry
Risk management in Software IndustryRisk management in Software Industry
Risk management in Software Industry
Rehan Akhtar
 
Risk Management In Software Product Development
Risk Management In Software Product DevelopmentRisk Management In Software Product Development
Risk Management In Software Product Development
Amandeep Midha
 

What's hot (20)

Risk Management
Risk ManagementRisk Management
Risk Management
 
risk management
risk managementrisk management
risk management
 
Software Engineering Risk Management Software Application
Software Engineering Risk Management   Software ApplicationSoftware Engineering Risk Management   Software Application
Software Engineering Risk Management Software Application
 
Risk management
Risk managementRisk management
Risk management
 
Enterprise risk management
Enterprise risk managementEnterprise risk management
Enterprise risk management
 
Risk analysis
Risk analysisRisk analysis
Risk analysis
 
Strategic risk management
Strategic risk managementStrategic risk management
Strategic risk management
 
Guide to risk management 2
Guide to risk management 2Guide to risk management 2
Guide to risk management 2
 
Contracts risk management notes bagamoyo 2.12.2017 final v1
Contracts risk management  notes bagamoyo 2.12.2017 final v1Contracts risk management  notes bagamoyo 2.12.2017 final v1
Contracts risk management notes bagamoyo 2.12.2017 final v1
 
Bertrand's Individual Essay
Bertrand's Individual EssayBertrand's Individual Essay
Bertrand's Individual Essay
 
Risk management
Risk managementRisk management
Risk management
 
Software Project Risk Management Practice in Oman
Software Project Risk Management Practice in OmanSoftware Project Risk Management Practice in Oman
Software Project Risk Management Practice in Oman
 
Risk management
Risk managementRisk management
Risk management
 
Risk management in Software Industry
Risk management in Software IndustryRisk management in Software Industry
Risk management in Software Industry
 
Project/Program Risk management
Project/Program Risk managementProject/Program Risk management
Project/Program Risk management
 
Strategic Risk: Linking Risk Management & Strategy Management processes
Strategic Risk: Linking Risk Management & Strategy Management processesStrategic Risk: Linking Risk Management & Strategy Management processes
Strategic Risk: Linking Risk Management & Strategy Management processes
 
Risk Management In Software Product Development
Risk Management In Software Product DevelopmentRisk Management In Software Product Development
Risk Management In Software Product Development
 
Risk management
Risk managementRisk management
Risk management
 
Strategic Risk Management in the Face of Uncertainty and Unexpected Risks
Strategic Risk Management in the Face of Uncertainty and Unexpected RisksStrategic Risk Management in the Face of Uncertainty and Unexpected Risks
Strategic Risk Management in the Face of Uncertainty and Unexpected Risks
 
Risk Management Process Steps PowerPoint Presentation Slides
Risk Management Process Steps PowerPoint Presentation Slides Risk Management Process Steps PowerPoint Presentation Slides
Risk Management Process Steps PowerPoint Presentation Slides
 

Similar to Risk mgmt

project_risk_mgmt_final 1.ppt
project_risk_mgmt_final 1.pptproject_risk_mgmt_final 1.ppt
project_risk_mgmt_final 1.ppt
BetshaTizazu2
 
Project Management C7 -risk_management
Project Management C7  -risk_managementProject Management C7  -risk_management
Project Management C7 -risk_management
Izah Asmadi
 
Project risk management model based on prince2 and scrum frameworks
Project risk management model based on prince2 and scrum frameworksProject risk management model based on prince2 and scrum frameworks
Project risk management model based on prince2 and scrum frameworks
ijseajournal
 

Similar to Risk mgmt (20)

Risk Management Presentation.pptx
Risk Management Presentation.pptxRisk Management Presentation.pptx
Risk Management Presentation.pptx
 
project risk management
project risk managementproject risk management
project risk management
 
8. project risk management
8. project risk management8. project risk management
8. project risk management
 
Schwalbe-11ProjectRisk.ppt
Schwalbe-11ProjectRisk.pptSchwalbe-11ProjectRisk.ppt
Schwalbe-11ProjectRisk.ppt
 
project_risk_mgmt_final 1.ppt
project_risk_mgmt_final 1.pptproject_risk_mgmt_final 1.ppt
project_risk_mgmt_final 1.ppt
 
Risk strategies presentation
Risk strategies presentationRisk strategies presentation
Risk strategies presentation
 
PMI project_risk_management_final_2022.ppt
PMI project_risk_management_final_2022.pptPMI project_risk_management_final_2022.ppt
PMI project_risk_management_final_2022.ppt
 
project_risk_mgmt_final.ppt
project_risk_mgmt_final.pptproject_risk_mgmt_final.ppt
project_risk_mgmt_final.ppt
 
project_risk_mgmt_final.ppt
project_risk_mgmt_final.pptproject_risk_mgmt_final.ppt
project_risk_mgmt_final.ppt
 
For Ch -6 == Risk Monitoring & Controlling.pptx
For Ch -6 == Risk Monitoring & Controlling.pptxFor Ch -6 == Risk Monitoring & Controlling.pptx
For Ch -6 == Risk Monitoring & Controlling.pptx
 
Comprehensive Overview Of Risk Management
Comprehensive Overview Of Risk ManagementComprehensive Overview Of Risk Management
Comprehensive Overview Of Risk Management
 
Episode 25 : Project Risk Management
Episode 25 :  Project Risk ManagementEpisode 25 :  Project Risk Management
Episode 25 : Project Risk Management
 
Project Risk management
Project Risk management Project Risk management
Project Risk management
 
Beyond PMP: Risk Management
Beyond PMP: Risk ManagementBeyond PMP: Risk Management
Beyond PMP: Risk Management
 
Information Security Risk Management
Information Security Risk Management Information Security Risk Management
Information Security Risk Management
 
PPT SE SACHIN.ppt
PPT SE SACHIN.pptPPT SE SACHIN.ppt
PPT SE SACHIN.ppt
 
Risk.pdf
Risk.pdfRisk.pdf
Risk.pdf
 
PECB Webinar: Risk-management in IT intensive SMEs
PECB Webinar: Risk-management in IT intensive SMEsPECB Webinar: Risk-management in IT intensive SMEs
PECB Webinar: Risk-management in IT intensive SMEs
 
Project Management C7 -risk_management
Project Management C7  -risk_managementProject Management C7  -risk_management
Project Management C7 -risk_management
 
Project risk management model based on prince2 and scrum frameworks
Project risk management model based on prince2 and scrum frameworksProject risk management model based on prince2 and scrum frameworks
Project risk management model based on prince2 and scrum frameworks
 

Recently uploaded

Abortion pills in Jeddah |‱ +966572737505 ] GET CYTOTEC
Abortion pills in Jeddah |‱ +966572737505 ] GET CYTOTECAbortion pills in Jeddah |‱ +966572737505 ] GET CYTOTEC
Abortion pills in Jeddah |‱ +966572737505 ] GET CYTOTEC
Abortion pills in Riyadh +966572737505 get cytotec
 
Agile Coaching Change Management Framework.pptx
Agile Coaching Change Management Framework.pptxAgile Coaching Change Management Framework.pptx
Agile Coaching Change Management Framework.pptx
alinstan901
 
Beyond the Codes_Repositioning towards sustainable development
Beyond the Codes_Repositioning towards sustainable developmentBeyond the Codes_Repositioning towards sustainable development
Beyond the Codes_Repositioning towards sustainable development
Nimot Muili
 
internship thesis pakistan aeronautical complex kamra
internship thesis pakistan aeronautical complex kamrainternship thesis pakistan aeronautical complex kamra
internship thesis pakistan aeronautical complex kamra
AllTops
 
The Psychology Of Motivation - Richard Brown
The Psychology Of Motivation - Richard BrownThe Psychology Of Motivation - Richard Brown
The Psychology Of Motivation - Richard Brown
SandaliGurusinghe2
 

Recently uploaded (16)

W.H.Bender Quote 62 - Always strive to be a Hospitality Service professional
W.H.Bender Quote 62 - Always strive to be a Hospitality Service professionalW.H.Bender Quote 62 - Always strive to be a Hospitality Service professional
W.H.Bender Quote 62 - Always strive to be a Hospitality Service professional
 
Abortion pills in Jeddah |‱ +966572737505 ] GET CYTOTEC
Abortion pills in Jeddah |‱ +966572737505 ] GET CYTOTECAbortion pills in Jeddah |‱ +966572737505 ] GET CYTOTEC
Abortion pills in Jeddah |‱ +966572737505 ] GET CYTOTEC
 
Reviewing and summarization of university ranking system to.pptx
Reviewing and summarization of university ranking system  to.pptxReviewing and summarization of university ranking system  to.pptx
Reviewing and summarization of university ranking system to.pptx
 
Marketing Management 16th edition by Philip Kotler test bank.docx
Marketing Management 16th edition by Philip Kotler test bank.docxMarketing Management 16th edition by Philip Kotler test bank.docx
Marketing Management 16th edition by Philip Kotler test bank.docx
 
Gautam Buddh Nagar Call Girls đŸ„° 8617370543 Service Offer VIP Hot Model
Gautam Buddh Nagar Call Girls đŸ„° 8617370543 Service Offer VIP Hot ModelGautam Buddh Nagar Call Girls đŸ„° 8617370543 Service Offer VIP Hot Model
Gautam Buddh Nagar Call Girls đŸ„° 8617370543 Service Offer VIP Hot Model
 
Agile Coaching Change Management Framework.pptx
Agile Coaching Change Management Framework.pptxAgile Coaching Change Management Framework.pptx
Agile Coaching Change Management Framework.pptx
 
Beyond the Codes_Repositioning towards sustainable development
Beyond the Codes_Repositioning towards sustainable developmentBeyond the Codes_Repositioning towards sustainable development
Beyond the Codes_Repositioning towards sustainable development
 
Siliguri Escorts Service Girl ^ 9332606886, WhatsApp Anytime Siliguri
Siliguri Escorts Service Girl ^ 9332606886, WhatsApp Anytime SiliguriSiliguri Escorts Service Girl ^ 9332606886, WhatsApp Anytime Siliguri
Siliguri Escorts Service Girl ^ 9332606886, WhatsApp Anytime Siliguri
 
Safety T fire missions army field Artillery
Safety T fire missions army field ArtillerySafety T fire missions army field Artillery
Safety T fire missions army field Artillery
 
International Ocean Transportation p.pdf
International Ocean Transportation p.pdfInternational Ocean Transportation p.pdf
International Ocean Transportation p.pdf
 
internship thesis pakistan aeronautical complex kamra
internship thesis pakistan aeronautical complex kamrainternship thesis pakistan aeronautical complex kamra
internship thesis pakistan aeronautical complex kamra
 
digital Human resource management presentation.pdf
digital Human resource management presentation.pdfdigital Human resource management presentation.pdf
digital Human resource management presentation.pdf
 
Leaders enhance communication by actively listening, providing constructive f...
Leaders enhance communication by actively listening, providing constructive f...Leaders enhance communication by actively listening, providing constructive f...
Leaders enhance communication by actively listening, providing constructive f...
 
Intro_University_Ranking_Introduction.pptx
Intro_University_Ranking_Introduction.pptxIntro_University_Ranking_Introduction.pptx
Intro_University_Ranking_Introduction.pptx
 
How Software Developers Destroy Business Value.pptx
How Software Developers Destroy Business Value.pptxHow Software Developers Destroy Business Value.pptx
How Software Developers Destroy Business Value.pptx
 
The Psychology Of Motivation - Richard Brown
The Psychology Of Motivation - Richard BrownThe Psychology Of Motivation - Richard Brown
The Psychology Of Motivation - Richard Brown
 

Risk mgmt

  • 1. IBM Global Services (ITS) 10/30/15 © 2004 IBM Corporation Risk Management Fundamentals and Beyond Dr. Oliver Klapp
  • 2. IBM Global Services (ITS) © 2004 IBM Corporation 2 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning VITPM 4.12 Risk Categories: Risk Identification VITPM4.13 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning VITPM 4.15 Risk Categories: Risk Monitoring and Control VITPM 6.6 6 7 8 9 VITPM 4.14
  • 3. IBM Global Services (ITS) © 2004 IBM Corporation 3 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning Risk Categories: Risk Identification 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning Risk Categories: Risk Monitoring and Control 6 7 8 9
  • 4. IBM Global Services (ITS) © 2004 IBM Corporation 4 Risk Management Fundamentals 10/30/15 What is Risk Management?  Risk Management is the systematic process of identifying, analyzing and responding to project risk. (PMBOK Guide)  It includes [maximizing the probability and consequences of positive events and] minimizing the probability and consequences of adverse events to project objectives.
  • 5. IBM Global Services (ITS) © 2004 IBM Corporation 5 Risk Management Fundamentals 10/30/15  IBM defines Risk as 'a possible undesirable and unplanned event that could result in the project not meeting one or more of its objectives'  PMI further defines risk as involving only the possibility of suffering harm or loss. (PMBOK)  Synonyms for risk include danger, jeopardy, hazard, peril, gamble, chance (MS Word Thesaurus) deutsch: Gefahr, GefĂ€hrlichkeit, Wagnis, GlĂŒcksfall, Unsicherheit, 
  Thus, Risk Management can be defined as ‘the art and science of identifying, analysing and responding to risk events.' (PMBOK) Risk Management Definitions
  • 6. IBM Global Services (ITS) © 2004 IBM Corporation 6 Risk Management Fundamentals 10/30/15 Impact Probability Low Impact High Impact Low Probability High Probability Low Risk Moderate Risk High Risk An Event A risk event is defined as a possible undesirable event or unplanned opportunity. All projects have risks. If risks are ignored you will increase the likelihood that the project will fail, or will be less successful. What is Risk
  • 7. IBM Global Services (ITS) © 2004 IBM Corporation 7 Risk Management Fundamentals 10/30/15 Risk versus Issues  Risks is when an event may occur – Risk management allows for proactive management – It allows customer expectation management early – Financial impacts may be avoided  Issue is when a risk has eventuated (a fact, e.g. PMRs) – Reactive management approach – Issue results in loss – financial or customer satisfaction
  • 8. IBM Global Services (ITS) © 2004 IBM Corporation 8 Risk Management Fundamentals 10/30/15 Risk vs. Change vs. Issue Management  Risks Management – A strategic process for identifying and managing possible future events that may influence project performance and results  Change Management – A process to formally control the management and approval of project baselines (requirements, technical, schedule and so on) and changes to those baselines  Issue Management – A tactical process to formally control the management of problems that typically result from risk, change, ineffective project management, or a combination of these
  • 9. IBM Global Services (ITS) © 2004 IBM Corporation 9 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning Risk Categories: Risk Identification 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning Risk Categories: Risk Monitoring and Control 6 7 8 9
  • 10. IBM Global Services (ITS) © 2004 IBM Corporation 10 Risk Management Fundamentals 10/30/15 Why is Risk Management Important, Why Focus on Risk Management?  Through managing uncertainty, effective risk management:* – Protect: ‱ Spend (GP), cost ‱ Schedule ‱ Requirements – Prevent surprises – Prevent management by crisis – Prevent problems from occurring or, if they do occur, from escalating – by organizational appreciation of uncertainty, increases competitiveness in bidding and reduces chance of disaster contracts/projects (can you think of any?) where risk is too great. – helps build good employee morale by encouraging creative thinking, cross team communication and trust. – And much more! *Chapman, Chris and Steve Ward (1996). Why You Need Risk Management. Project Management Requirements Cost Schedule
  • 11. IBM Global Services (ITS) © 2004 IBM Corporation 11 Risk Management Fundamentals 10/30/15 Project risk and consequences vary over the project life cycle Risk Time Total Project Life Cycle Conceive Develop Implement Terminate Amount of Stake Opportunity and Risk Period of Highest Risk Impact $ Value
  • 12. IBM Global Services (ITS) © 2004 IBM Corporation 12 Risk Management Fundamentals 10/30/15 Risk Management Planning Approach on how to manage risks in the project Risk Identification Determining the risks that may affect the project and documenting characteristics (consider validity of assumptions) Qualitative Risk Analysis Qualitative Analysis and prioritising its effects Quantitative Risk Analysis Measuring the probability of impact Estimating the cost of impact Risk Response Planning Developing procedures and techniques to reduce the threat of risks and enhance opportunities Risk Monitoring and Control Ongoing management of risks during project execution Analyse Respond Control ReactIdentify Scope of Risk Management
  • 13. IBM Global Services (ITS) © 2004 IBM Corporation 13 Risk Management Fundamentals 10/30/15 Risk Process PMBOK 2003 11.1 Risk Management Planning – deciding how to approach, plan, and execute the risk management activities for a project. 11.2 Risk Identification – determining which risks might affect the project and documenting their characteristics. 11.3 Qualitative Risk Analysis – prioritizing risks for subsequent further analysis or action by assessing and combining their probability of occurrence and impact. 11.4 Quantitative Risk Analysis – numerically analyzing the effect on overall project objectives of identified risks. 11.5 Risk Response Planning – developing options and actions to enhance opportunities, and to reduce threats to project objectives. 11.6 Risk Monitoring and Control – tracking identified risks, monitoring residual risks, identifying new risks, executing risk response plans, and evaluating their effectiveness throughout the project life cycle.
  • 14. IBM Global Services (ITS) © 2004 IBM Corporation 14 Risk Management Fundamentals 10/30/15 Project Risk Management Process Flow Diagram
  • 15. IBM Global Services (ITS) © 2004 IBM Corporation 15 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning Risk Categories: Risk Identification 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning Risk Categories: Risk Monitoring and Control 6 7 8 9
  • 16. IBM Global Services (ITS) © 2004 IBM Corporation 16 Risk Management Fundamentals 10/30/15 Risk Management Planning  Plan the next phases/categories  PMI lists the following inputs to Project Risk Management Planning to create the risk management plan: – Project Charter  Teilprojektbeschreibungsdokumente – Organization’s risk management policies – Defined roles and responsibilities – Stakeholder risk tolerances – Template for the organization’s risk management plan  FitPM – Work breakdown structure  ProjektplĂ€ne  The main tool used is “planning meetings”.
  • 17. IBM Global Services (ITS) © 2004 IBM Corporation 17 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning Risk Categories: Risk Identification 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning Risk Categories: Risk Monitoring and Control 6 7 8 9
  • 18. IBM Global Services (ITS) © 2004 IBM Corporation 18 Risk Management Fundamentals 10/30/15 Risk Identification  Inputs to risk identification: – risk management plan – items from project planning – risk categories/types – historical information  The products of risk identification are risks, triggers, and inputs to other processes (further action, etc.).  Should not only be performed at the beginning of the project, but also throughout the project’s life.
  • 19. IBM Global Services (ITS) © 2004 IBM Corporation 19 Risk Management Fundamentals 10/30/15 The key tools and techniques to use to identify risks are: ïź Run a risk identification workshop (cross section of the project's stakeholders) ïź Peer reviews ïź Review the risk assessment checklists created by the organization ïź Interview key members of the project team ïź Assumption analysis ïź Examine sources of risk ïź Study Lessons Learned from previous projects Analyse Respond Control ReactIdentify Risk Identification Tools and Techniques
  • 20. IBM Global Services (ITS) © 2004 IBM Corporation 20 Risk Management Fundamentals 10/30/15 Using Inputs to Identify Risk Events/Sources of Risk  Work breakdown structure / ProjektplĂ€ne  Contractual requirements or statements of work (SOWs), E-Vorlage  Supplier contracts or customer agreements  Field and marketing information  Project plan assumptions  Earned value (EV) data  Lessons learned files from previous projects  Company objectives and plans  Other project-related plans  Project schedule  Review reports  Project plan dependencies  Resource sourcing !!!  Sponsor or other stakeholder feedback  As you progress on the project, some other areas to look at are:  Change requests, Issue documents, Event log, Project status reports
  • 21. IBM Global Services (ITS) © 2004 IBM Corporation 21 Risk Management Fundamentals 10/30/15 Identify the Risk StatementIdentify the Risk Statement  Beispiel: Performanz nach Konsolidierung Karat -> Prob M, impact VH vs. M / M; Warum?  Risks are described as having three parts: – If <condition> and <dependency exists> then <impact will occur> – If <condition> ‱ The event under which the risk will materialize – e.g., IF GeeWiz Inc. does not deliver the Oracle interface by November 2001. – And <dependency> ‱ The reason for the project’s dependence on the risk – e.g., AND it becomes necessary to develop an interface from scratch. – Then <impact> ‱ The quantifiable impact of the realized risk – e.g., THEN our schedule will slip by 3 months and our costs will exceed our budget by 10%.
  • 22. IBM Global Services (ITS) © 2004 IBM Corporation 22 Risk Management Fundamentals 10/30/15 Further Examples of Risk Statements  IF the roof leaks because of the constant snowfalls, AND the project team will be evacuated from the trailer, THEN we will not be able to deploy data on schedule.  IF I violate traffic rules, AND get one more ticket, THEN my insurance company will drop me.  IF loan is not approved by May, AND we cannot move into new house, THEN we will have to extend our rent.
  • 23. IBM Global Services (ITS) © 2004 IBM Corporation 23 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning Risk Categories: Risk Identification 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning Risk Categories: Risk Monitoring and Control 6 7 8 9
  • 24. IBM Global Services (ITS) © 2004 IBM Corporation 24 Risk Management Fundamentals 10/30/15 Qualitative Risk Analysis  Inputs: – the risk management plan – identified risks – project status (early in life, later in life), project type (common, uncommon), data precision, scales of probability and impact, and assumptions.  Tools used: – applying risk probability and impact to individual risks – a risk rating matrix that combines probability and impact of risks (such as “low”, “moderate”, “high”)  Qualitative risk analysis produces an overall risk ranking for the project, list of risks for additional analysis and management, and trends in qualitative risk analysis results.
  • 25. IBM Global Services (ITS) © 2004 IBM Corporation 25 Risk Management Fundamentals 10/30/15 When analysing the risk, consider the: Probability of occurrence Magnitude of loss or impact of each identified risk event Severity of risk (Severity = Probability x Impact) Evaluation factors include: Precedence (Has the risk occurred before?) Familiarity of operation (Has the work been undertaken before?) Resources and skills Time, cost, and quality Probability (What is the likelihood of the risk occurring?) Impact (What is the effect on the project or business?) Win, Profit, Customer Satisfaction  Overall Analyse Respond Control ReactIdentify Evaluation of Risk
  • 26. IBM Global Services (ITS) © 2004 IBM Corporation 26 Risk Management Fundamentals 10/30/15 Example: Define consequences/impact Analyse Consequence Probability Consequence Area Definition Cost Entail budget overrun on more than 1 mill EURO in <name on project> High Time Entail that <name on project> is delayed more than 1 week Quality Entail that subsequent projects can not be started Cost Entail budget overrun on less than 1 mill EURO but more than 0,1 mill EURO in <name on project> Medium Time Entail that <name on project> is delayed less than 1 week but more than 1 day Quality Entails that subsequent projects has considerable negative influences Cost Entail budget overrun less than 0,1 mill EURO in <name on project> Low Time Entail that <name on project> is delayed less than 1 day Quality Entails that subsequent projects only has minor negative influences
  • 27. IBM Global Services (ITS) © 2004 IBM Corporation 27 Risk Management Fundamentals 10/30/15 Risk Exposure Matrix Exposure Rating Very High High Medium Low Very High High Medium Low VH VHVH LH HH HH HH MM M M M Overall Impact Probability  overall impact: highest of each of the impact categories, e.g. L L M -> M
  • 28. IBM Global Services (ITS) © 2004 IBM Corporation 28 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning Risk Categories: Risk Identification 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning Risk Categories: Risk Monitoring and Control 6 7 8 9
  • 29. IBM Global Services (ITS) © 2004 IBM Corporation 29 Risk Management Fundamentals 10/30/15 Quantitative Risk Analysis  Create a prioritized list of quantified risks, probabilistic analysis of the project’s duration and costs, probability of achieving cost and time targets, and trends.  This is performed by the use of – the risk management plan, – identified risks, – list of prioritized risks, – list of risks for further analysis and management, – historical information, – expert judgment, – and other inputs along with the tools of interviewing, sensitivity analysis, decision tree analysis, and simulation.
  • 30. IBM Global Services (ITS) © 2004 IBM Corporation 30 Risk Management Fundamentals 10/30/15 Comparative Risk Ranking Tool  Es werden den Risiken Buchstaben zugeordnet (möglichst nicht mehr als 5 bis 10 Risiken).  Danach werden diese Risiken in unten stehende Tabelle eingetragen.  Dann werden die Risiken in den einzelnen Stufen miteinander verglichen und der entsprechende Buchstabe in die freien Felder eingetragen.  Das Programm rechnet dann automatisch das am meisten genannte Risiko und man erhĂ€lt das entsprechende Risk-Ranking.  Achtung: Es darf nicht sein, dass ein zwei oder mehrere Risiken das gleiche Ranking besitzen, da jedes Risiko mit jedem anderen verglichen wird! 3 A A 1 B a B' 4 C a a C' 2 D b D' 0 E c c N 0 F c F' 0 G c G' 0 H d H' 0 I d I' 0 J J' Ranking A B C D E F G H I J 2 4 1 3 5 5 5 5 5 5
  • 31. IBM Global Services (ITS) © 2004 IBM Corporation 31 Risk Management Fundamentals 10/30/15 AnalyzeAnalyze Time Frame and FrequencyTime Frame and Frequency  Time FrameTime Frame the period and/or points in time when risk consequences might impact the project. *Timing is relative to the expected length of the project.  FrequencyFrequency Characteristics of a risk which are likely to occur multiple times throughout the project. (e.g. das Thema Ressourcen jedes Quartal) Near-term: Less than 30 days Mid-term: Between 30 – 90 days Far-term: Greater than 90 days
  • 32. IBM Global Services (ITS) © 2004 IBM Corporation 32 Risk Management Fundamentals 10/30/15 Assign Risk Ownership In determining risk assignment consider:  Accountability – who is ultimately held “accountable” for determining the risk approach, as well as the success or failure of mitigation and/or use of contingency plans.  Responsibility – who is charged with developing and implementing (or overseeing) risk mitigation actions and/or use of contingency plans.  Authority – who has the right and ability to assign resources for mitigation and/or contingency
  • 33. IBM Global Services (ITS) © 2004 IBM Corporation 33 Risk Management Fundamentals 10/30/15 Risk Log 1/2 Ris k ID TP Kategorie Beschreibung Zeitl. AusprĂ€ gung Eintritt s- wÂŽkeit (pre) Impa kt (pre) Score/ Exposu re (pre) Score zur Berechnung nomalized risk score Strategie 1 Alg PMgmt Wenn die erforderlichen Ressourcen nicht bereitgestellt werden, fĂŒhrt dies zu Verzögerungen im Projekt. VH H VH 14 Eingrenzen 10 App/ DB extern Wenn Probleme mit Fremd-SW entstehen, besteht eine hohe AbhĂ€ngigkeit zu den Softwarelieferanten und deren Support. H M H 9 Accept 11 INET technisch Wenn keine Anpasssung der Domino- und Websphere basierten Applikationen auf Websphere Release 5.X erfolgt, ist keine Konsolidierung vertretbar möglich. M M M 5 Eingrenzen 12 INET technisch Wenn keine Migration der Applikationen auf WebSphere 5.X erfolgt, kann die Anzahl der Applikationen und Server im Bereich Domino/WebSphere Applikationsserver nicht verringert werden. M M M 5 Eingrenzen 14 Alg organisatorisch Wenn die Akzeptanz bei laufenden Projekten und in den Referaten gegenĂŒber SOKO nicht besteht, sind Termine und Zielsetzungen gefĂ€hrdet. VH H VH 14 Eingrenzen 15 App technisch Wenn die Zielsystemauslastung suboptimal gefĂŒhrt wird, sind die Zielzahlen gefĂ€hrdert. L M M 5 accept 16 App technisch Wenn Cohosting durchgefĂŒhrt wird, kann dies zu Destabilisierung, ohne vorheriges Monitoring sogar zum Serverausfall fĂŒhren. L M M 5 accept 19 Alg organisatorisch Wenn SOKO relevante MA das Zeit Plus Programm annehmen, kommt es zu starken Terminproblemen. VH H VH 14 accept 23 App organisatorisch Abstimmung TP APP mit Serverbetrieb kann die In-Produktionnahme von Apps verhindern / verzögern (Workshop war am 14.6. , bis jetzt sind immer noch nicht Betriebs-MA benannt H M H 9 accept 24 App technisch Wenn erhöhte Anforderungen an Zielsystem-Messungen und oder andere Verfahren vor einer in- Produktionnahme (eigentlich alle Anforderungen ungleich den im BC angenommenen) entstehen, erhöhen sich die AufwĂ€nde und es kann zu Terminverschiebungen kommen. H H H 9 eingrenzen
  • 34. IBM Global Services (ITS) © 2004 IBM Corporation 34 Risk Management Fundamentals 10/30/15 Risk Log 2/2 Strategie Maßnahmen Eintritts- wÂŽkeit (post) Impakt (post) Score/ Exposu re (post) Score zur Berechnung nomalized risk score Originator Datum Aufnahme Owner Status Links to Issue/OP ID Eingrenzen o quartalsweise Abstimmung der Ressourcen mit den RLs; o bei punktuellen EngpĂ€ssen Einsatz externer Ressourcen o persönliche Ansprache der RLs durch die Projektleitung o Kommunikation der möglichen Projektmitarbeiter die Zeitplus planen, um Zeit fĂŒr alternative Lösungen zu bekommen. H M H 9 alle PM ongoing Accept Risiko ist im BC berĂŒcksichtigt. Als Maßnahme bleibt die Überwachung der Abbauzahlen H L M 5 PM/Architektongoing Eingrenzen GesprĂ€ch PL in HH 28./29.10. in HH M M M 5 Horneff Architekt ongoing Eingrenzen GesprĂ€ch PL in HH 28./29.10. in HH M M M 5 Horneff Architekt ongoing Eingrenzen o persönliche Kontakte zu Linienverantwortlichen und Projektleitern pflegen o Sichtbarkeit des Topsponsors/Managements fĂŒr das Projekt nach außen o Initiierung von PersonalgesprĂ€chen H M H 9 Kern PM ongoing accept Im BC berĂŒcksichtigt L M M 5 G.S. Architekt offen accept Accept, da nicht fĂŒr alle Services Abnahmeumgebungen vorhanden sind L M M 5 G.S. Architekt offen accept siehe Risiko 1 VH L H 9 PM (O.K.) PM ongoing accept H M H 9 eingetreten siehe OP 24 eingrenzen regelmĂ€ĂŸige Abstimmungen zwischen SOKO-Architektur und Betrieb rollierender 3Monatsplan der TPL mit Betrieb regelmĂ€ĂŸig abstimmen Performancemessung stĂ€rken M M M 5 ongoing
  • 35. IBM Global Services (ITS) © 2004 IBM Corporation 35 Risk Management Fundamentals 10/30/15 Summary Risk Analysis  Analyse: transform risk data into decision making information  Define probability  Define impact (e.g.for Win, Profit, Satisfaction)  Overall impact: highest of each of the impact categories, e.g. L L M -> M  Risk Exposure: “product” probability and overall impact (s. matrix)  Scale for impacts and probability: low, medium, high, very high  Prioritisation/Ranking (s. e.g. comparative risk ranking)
  • 36. IBM Global Services (ITS) © 2004 IBM Corporation 36 Risk Management Fundamentals 10/30/15 Normalized Project Risk Scoring:  Rate exposure of each risk: 2 (low), 5(medium), 9(high), 14 (very high)  Sum all scores (getrennt nach Impact Kategorien und overall)  normalized score = sum of risk scores * 10 / number of risks (risks no longer considered must still be listed as “low”, otherwise the overall risk will be too high)  OVERALL RISK EXPOSURE – 21–40 = Low – 41–60 = Medium – 61–80 = High – 81+ = Very High
  • 37. IBM Global Services (ITS) © 2004 IBM Corporation 37 Risk Management Fundamentals 10/30/15 Normalization: Use, Strengths, and Weaknesses  Use: – Qualitative elements must be weighted  Strengths: – Helps with comparison of different projects – Allows for comparison of risk categories (e.g. Win, Profit, Customer Satisfaction)  Weaknesses: – Tends to result in „High“ overall risk, especially if only few risks are used – All identified risks must be retained, including those no longer considered ‱ Risks no longer be considered must be listed as „Low“, otherwise the overall risk will be to high – The result is easy to manipulate
  • 38. IBM Global Services (ITS) © 2004 IBM Corporation 38 Risk Management Fundamentals 10/30/15 Risk Analysis Tools  Monte Carlo simulation and Sensitivity Analysis aid the project management community in determining which variables of a project most impact the project’s possible outcomes, and by how much.  For example, using Monte Carlo simulation one can obtain statistical probabilities of project variable’s impact on the overall project expected value (such as, maximum and minimum impact of a variable on the project’s expected value).  From this information on project variables impact, a tornado diagram could be created to analyze all variables to identify which ones should be kept as a priority to focus on to manage the project’s outcome.
  • 39. IBM Global Services (ITS) © 2004 IBM Corporation 39 Risk Management Fundamentals 10/30/15 Risk Analysis Tools Sensitivity Analysis - Tornado Diagram
  • 40. IBM Global Services (ITS) © 2004 IBM Corporation 40 Risk Management Fundamentals 10/30/15 Risk Analysis Tools Decision Tree with EMV (Expected Monetary Value)
  • 41. IBM Global Services (ITS) © 2004 IBM Corporation 41 Risk Management Fundamentals 10/30/15 Risk Analysis Tools Pareto Analysis  80/20 Rule  Examples* – 20% of your customers provide 80% of your sales – 20% of your products provide 80% of your sales – 20% of your products provide 80% of your profit – 20% of your products provide 80% of your problems  Useful for*: – Prioritizes and focuses resources where they are most needed. – Measures the impact of an improvement by comparing before and after. – Visually displays the relative importance of causes, problems or other conditions.
  • 42. IBM Global Services (ITS) © 2004 IBM Corporation 42 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning Risk Categories: Risk Identification 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning Risk Categories: Risk Monitoring and Control 6 7 8 9
  • 43. IBM Global Services (ITS) © 2004 IBM Corporation 43 Risk Management Fundamentals 10/30/15  Avoid  Accept  Transfer  Contain (kann neue Risiken erzeugen): – Mitigation, specific actions to lower impact, probability or both (wir tun was, die Kosten fallen jetzt an) – Risk contingency planning, prepare a plan of action (nur Plan vorbereiten fĂŒr den Fall, falls das Risiko eintritt)  Insure  Risk Reserve – Risk contingency reserve (within project budget) – Risk management reserve (outside project budget) Analyse Respond Control ReactIdentify Risk Response Planning Strategies
  • 44. IBM Global Services (ITS) © 2004 IBM Corporation 44 Risk Management Fundamentals 10/30/15 Factors to Consider When Planning Risk Response  Many factors influence the selection of a risk mitigation strategy, including: ‱ Project phase and application ‱ Size ‱ Priority ‱ Complexity ‱ Expense ‱ Time available ‱ Required level of detail ‱ Ease of use ‱ Resource availability ‱ Contract type ‱ Terms and conditions ‱ The project manager's authority, accountability, and ability ‱ Commitment from the project manager and upper management ‱ Customer satisfaction
  • 45. IBM Global Services (ITS) © 2004 IBM Corporation 45 Risk Management Fundamentals 10/30/15 Risk Response Sheet Response strategy Response actions Cost Effec. New risk as a result of the strategy Accept none VG Avoid Transfer Insure Contain Mitigate Contain: risk cont. plan Risk reserve Select best strategies: cost/effectiveness/new risk technique (VG: very good, G: good, NG: not good) reassess project risk – post response -> new impacts, probabilities, exposures, normalized score
  • 46. IBM Global Services (ITS) © 2004 IBM Corporation 46 Risk Management Fundamentals 10/30/15 Impact of Different Risk Options
  • 47. IBM Global Services (ITS) © 2004 IBM Corporation 47 Risk Management Fundamentals 10/30/15 Remove high risk element(s) from proposal Add assumptions to define boundaries of task / function / risk Add appropriately skilled resources Transfer responsibility to the customer - but be careful that customer has the capability and commitment to perform (z.B. GBA !!) Recommend phased development approach Integrate special checkpoints by management Include Level of Effort (LOE) tasks Examine alternatives Develop containment & contingency plans Risk: Containment Actions
  • 48. IBM Global Services (ITS) © 2004 IBM Corporation 48 Risk Management Fundamentals 10/30/15 Ensure assumptions are accurate Establish firm baseline Detailed change control / management Assume risk but add premium Document analysis, tradeoffs, decisions Contact other QA representatives for ideas NOTE: Having a contingency plan does not necessarily reduce the risk rating Risk: Containment Actions (continued)
  • 49. IBM Global Services (ITS) © 2004 IBM Corporation 49 Risk Management Fundamentals 10/30/15 Risk Triggers  An important part of defining the risk containment plans is risk triggers.  Risk triggers are indicators that specify when an action needs to be taken. The format for defining risk triggers is as follows: If the trigger event happens, then initiate the action plan.  Examples of triggers and action plans include: ‱ If the power is out for more than 30 minutes, start using the generator. ‱ If the product delivery from the OEM vendor is n days late, then contact the other vendors to move their shipments back.  Effective triggers: ‱ Provide an early warning, which gives the team enough time to take appropriate action or focus extra attention on the risk ‱ Do not initiate actions unnecessarily ‱ Are easy to calculate and report
  • 50. IBM Global Services (ITS) © 2004 IBM Corporation 50 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning Risk Categories: Risk Identification 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning Risk Categories: Risk Monitoring and Control 6 7 8 9
  • 51. IBM Global Services (ITS) © 2004 IBM Corporation 51 Risk Management Fundamentals 10/30/15 Risk Monitoring and Control  Workaround plans, corrective action, project change requests, updates to the risk response plan, a risk database (repository for information), and updates to the risk identification checklists are all products of risk monitoring and control.  Products from previously-discussed processes are used to create these products (risk management plan, risk response plan) as well as project communication, additional risk identification and analysis (as part of the overall “Controlling” process), and scope changes.  Tools and techniques used are project risk response audits, periodic risk reviews, earned value analysis, technical performance measurement and additional risk response planning.  Watching and periodically reevaluating the risk for changes
  • 52. IBM Global Services (ITS) © 2004 IBM Corporation 52 Risk Management Fundamentals 10/30/15 Questions to Consider  Is the risk still possible / Is the event still risk?  Is the probability still the same?  Is the impact still the same?  Is the teamsÂŽs tolerance still the same?  Are there new risks?
  • 53. IBM Global Services (ITS) © 2004 IBM Corporation 53 Risk Management Fundamentals 10/30/15 Risk Tracking and Control  Critical success factors: – execute the process – reflect response strategies/actions in the WBS – develop alternatives – communicate, get buy-in on selected alternatives – execute the action plan  Triggers: – regular assessment – key events – Suppliers – key changes – human resources – Technical – Customer – Competition – other environmental changes  Risk Reaction – analyse the impact of the risk occurrence – update risk history – 

  • 54. IBM Global Services (ITS) © 2004 IBM Corporation 54 Risk Management Fundamentals 10/30/15 Risk Closure  Document the rationale for closure  Focus on information that can be used later, either within the current project or by future projects. Example of the type of information to be captured include: – Successful containment plans and why they were successful – Failed containment plans and the reason for that failure – Risk relationships and dependencies that were not obvious – Relevant data from various analyses, especially costs and benefits of mitigation plans  Close the risk and update the status.
  • 55. IBM Global Services (ITS) © 2004 IBM Corporation 55 Risk Management Fundamentals 10/30/15 Agenda 1 2 3 4 What is Risk Management? Why is Risk Management Important? Risk Categories: Risk Management Planning Risk Categories: Risk Identification 5 Risk Categories: Qualitative Risk Analysis Risk Categories: Quantitative Risk Analysis Recommendations and Summary Risk Categories: Risk Response Planning Risk Categories: Risk Monitoring and Control 6 7 8 9
  • 56. IBM Global Services (ITS) © 2004 IBM Corporation 56 Risk Management Fundamentals 10/30/15 Summary  Risk Management is iterative and continuous process for the life of a project.  It is concerned with identifying, analyzing and responding to project risks.  The benefit of risk management process is safeguards that you have done your best to minimize the probability and consequences of adverse events.  It’s a standard part of project management because it helps to make educated decisions that are vital to the project success.
  • 57. IBM Global Services (ITS) © 2004 IBM Corporation 57 Risk Management Fundamentals 10/30/15 Recommendations  Risk identification needs more focus during the controlling process (during the project’s execution).  Positive risks need to be identified and managed to optimize project success. (z.B. Image over IP)  Tools such as sensitivity analysis (tornado diagrams), utility functions, influence diagrams, decision trees, and SMART analysis could aid risk identification and quantification.  Involvement of program-level management in individual project risk management oversight would ensure the same level of risk management across program projects. Enforcement of the expected risk behavior and minimum standards for risk management could be increased at the project-level.  Increased priority and time available for risk management tasks at the project-level could be implemented by program management.
  • 58. IBM Global Services (ITS) © 2004 IBM Corporation 58 Risk Management Fundamentals 10/30/15 Identify and understand risk event Plan to handle risk events Incorporate Risk Management into the Project Management Planning Process Use the right strategies (for example, containment or contingency) to fit the situation Monitor risk events on a regular basis Reassess events after each risk event Don't try to do it SOLO The Project Managers Role in Risk Management
  • 59. IBM Global Services (ITS) © 2004 IBM Corporation 59 Risk Management Fundamentals 10/30/15
  • 60. IBM Global Services (ITS) © 2004 IBM Corporation 60 Risk Management Fundamentals 10/30/15 Backup
  • 61. IBM Global Services (ITS) © 2004 IBM Corporation 61 Risk Management Fundamentals 10/30/15 Risk Identification Workshop – Identification – Prioritisation – Quantification – Response Development – Mitigation Strategy – Control
  • 62. IBM Global Services (ITS) © 2004 IBM Corporation 62 Risk Management Fundamentals 10/30/15 Utility Theory  Suppose that, after some questioning, the builder is able to make the following statements:  'I am indifferent between receiving $120,000 for certain or entering a lottery that will give me a 0.9 probability of $150000 and a 0.1 probability of winning $0.‚  'I am indifferent between receiving $100,000 for certain or entering a lottery that will give me a 0.85 probability of winning $150 000 and a 0.15 probability of winning $0.‚  'I am indifferent between receiving $80,000 for certain or entering a lottery that will give me a 0.75 probability of winning $150 000 and a 0.25 probability of winning $0.'
  • 63. IBM Global Services (ITS) © 2004 IBM Corporation 63 Risk Management Fundamentals 10/30/15 Risk Analysis Tools Utility Theory – Risk Adverse/Neutral/Seeking  risk adverse for dollar values below $100,000, but is a risk seeker at higher dollar values (above $100,000). This is because the utility plot shows convex curvature at higher dollar values, and concave curvature at lower dollar values.
  • 64. IBM Global Services (ITS) © 2004 IBM Corporation 64 Risk Management Fundamentals 10/30/15 Risk Analysis Tools Decision Tree with Expected Utility  KontrĂ€res Ergebnis zum Decision Tree mit EVM

Editor's Notes

  1. To replace the title / subtitle with your own: Click on the title block -&amp;gt; select all the text by pressing Ctrl+A -&amp;gt; press Delete key -&amp;gt; type your own text
  2. &amp;lt;number&amp;gt;
  3. &amp;lt;number&amp;gt;
  4. Project Management Institute (2000) A Guide to the Project Management Body of Knowledge (PMBoK), 2000 edn, Philadelphia, PMI
  5. &amp;lt;number&amp;gt;
  6. &amp;lt;number&amp;gt; High Impact Plane hits building Earthquake Stock Market Collapse High Probability Rate Increase Customer Dependencies Low Probability and Low Risk Availability of Uni Students who know Basic Java
  7. &amp;lt;number&amp;gt;
  8. *Chapman, Chris and Steve Ward (1996). Why You Need Risk Management. Project Management
  9. &amp;lt;number&amp;gt;
  10. &amp;lt;number&amp;gt;
  11. &amp;lt;number&amp;gt;
  12. &amp;lt;number&amp;gt; There are many tools and techniques which can assist in identifying risks. WBS is one that we have just discussed, but others include: Peer reviews (QA1&amp;apos;s) Interviews and regular status meetings Workshops LL
  13. &amp;lt;number&amp;gt;
  14. &amp;lt;number&amp;gt;
  15. &amp;lt;number&amp;gt;
  16. &amp;lt;number&amp;gt;
  17. &amp;lt;number&amp;gt;
  18. &amp;lt;number&amp;gt; Risks are determined to be near, mid, or far term potential events This is the period when action is required to avoid or mitigate a risk Obviously it is critical to take immediate action to mitigate high impact, high probability, near-term risks You should strive to identify risks well before they become near-term
  19. &amp;lt;number&amp;gt; Questions to consider when assigning risks ownership: Who could solve the risk? Who would have the power and authority to allocate resources? Who is accountable or can be help accountable for the risk? Who has the time to manage the risk? Who has the ability to take action?
  20. $150,000 bid is better.
  21. *Kwak (2003), Risk Management Course, George Washington University
  22. &amp;lt;number&amp;gt;
  23. &amp;lt;number&amp;gt; PURPOSE: Ways to mitigate or contain risk (chart 1 of 2) COMMENTS: Consider these actions to mitigate the risk of a particular task
  24. &amp;lt;number&amp;gt; PURPOSE: Ways to mitigate or contain risk (chart 2 of 2) COMMENTS:
  25. &amp;lt;number&amp;gt;
  26. &amp;lt;number&amp;gt;
  27. &amp;lt;number&amp;gt;
  28. &amp;lt;number&amp;gt; Risk Management may equal PM, but it involves all players and team members.
  29. Risk Management deals with project uncertainty
  30. Measures organization or individual risk posture.
  31. Measures organization or individual risk posture.
  32. $100,000 bid is now better!