LSSBI Advisory

Taming the Unexpected: Managing Risks on Projects (Part 4)
Taming the unexpected refers to the strategies and practices aimed at effectively managing unforeseen risks and uncertainties that can impact project success.
RISK MANAGEMENT PROCESSES
• Risk identification
• Risk Analysis
• Risk Response Planning
• Risk Monitoring & Control
Risk Response planning is the crucial aspect of project management to identify potential risks to ensure successful project completion. Risk response planning involves developing options and determining actions to enhance opportunities and reduce threats to project objectives.
Risk response strategies are essential components of risk management in projects and organizations. They provide a structured approach to handling potential risks, ensuring that risks are managed proactively and effectively. Here are the primary risk response strategies, typically divided into four categories for negative risks (threats) and four categories for positive risks (opportunities):
Response Strategies For Negative Risks (Threats):
Avoidance:
This strategy involves taking actions to eliminate the threat or protect the project from its impact.
Examples: Changing the project plan, modifying scope, extending the schedule, or canceling the project.
Mitigation:
Mitigation involves reducing the probability or impact of a threat to an acceptable level.
Examples: Implementing new safety measures, conducting additional testing, using higher quality materials, or hiring expert resources.
Transfer:
This strategy involves shifting the impact of a threat to a third party, typically by means of contracts or insurance.
Examples: Purchasing insurance, outsourcing certain tasks, or entering into fixed-price contracts.
Acceptance:
Acceptance means acknowledging the risk and not taking any action unless the risk occurs. It can be passive (no action) or active (establishing a contingency plan).
Examples: Creating contingency reserves, developing a fallback plan, or simply acknowledging the risk without additional actions.
Response Strategies for Positive Risks (Opportunities):
Exploitation:
Exploitation is aimed at ensuring that the opportunity is realized.
Examples: Assigning the best resources to the project, investing additional resources to finish earlier, or taking advantage of a favorable market condition.
Enhancement:
Enhancement involves increasing the probability or impact of an opportunity.
Examples: Strengthening team capabilities, improving project plans, or adopting new technologies that increase efficiency.
Sharing:
Sharing involves allocating ownership of the opportunity to a third party who is best able to capture the benefit.
Examples: Forming partnerships, joint ventures, or alliances.
Acceptance:
Similar to the acceptance of threats, this involves recognizing the opportunity but not taking proactive steps unless it occurs.
Examples: Not making specific plans for the opportunity but remaining open to its benefits if it arises.
Other Considerations:
Contingency Planning:
Developing specific actions to be taken if identified risks occur. This includes contingency reserves (time, money, resources) set aside to address risks.
Risk Audits:
Conducting periodic reviews to ensure that risk management processes are effective and being followed.
The primary goal is to prepare for risks by having strategies to mitigate or capitalize on their impact. Risk response plans contain the strategy to manage each risk. These risk response strategies are a vital part of the risk management plan, and the risk management plan is a subsidiary plan to the project management plan. Don’t miss our next virtual Project Management Class - Project Management in Practice scheduled for July 9th-11th, 2024. For more details or enquiries call 08026004965 or send an email to [email protected] to register.

Taming the Unexpected: Managing Risks on Projects (Part 3)
Taming the Unexpected Series began with examining the types of Risks that a project can be exposed to. We decided to look into the Risk Management Process and we began with Risk Identification. We will in the process by examining Risk Analysis and the various techniques that can be used to perform risk Analysis.

Risk Analysis
Risk Analysis is a systematic process of assessing, and managing risks to minimize their impact on an organization or project. This involves using tools and techniques to determine the likelihood and impact of project risks that have been previously identified. It also helps project managers depicts the uncertainty of potential risks and how they would impact the project in terms of schedule, quality and cost.
Once risks are identified, they need to be evaluated based on their likelihood of occurrence (probability) and the potential impact (severity) they could have on your objectives. Qualitative or quantitative methods can be used for assessment or analysis.

Qualitative Techniques assign a likelihood rating (e.g., high, medium, low) and a severity rating (e.g., high, medium, low) based on expert judgment or experience.
Qualitative Risk Assessment Techniques
a. Probability & Impact Matrix
A Probability & Impact Matrix is a visual tool used to categorize and prioritize risks based on their probability and impact. The matrix typically consists of a grid where one axis represents the likelihood of occurrence, and the other axis represents the impact or severity of the risk.
Process:
• Identify risks.
• Assess the probability of each risk occurring.
• Assess the impact of each risk.
• Plot each risk on the matrix.
• Prioritize risks based on their position in the matrix (e.g., high likelihood/high impact risks are top priority).
b. Risk Ranking
Risk ranking involves assigning a qualitative rating to each risk based on its probability and impact. This method helps prioritize risks for management attention.

Process
• List Risks: Compile a list of identified risks.
• Define Criteria: Establish qualitative criteria for probability and impact (e.g., very high, high, medium, low, very low).
• Rate Risks: Assign a qualitative rating to each risk based on the established criteria.
• Rank Risks: Order the risks based on their ratings.
c. Risk Categorization
Risk categorization involves grouping risks into categories to understand common sources and themes. This technique helps in identifying patterns and developing more effective risk response strategies.
Process
• Identify Risk Categories: Define categories based on project context (e.g., technical, financial, operational, external).
• Assign Risks to Categories: Group identified risks into the defined categories.
• Analyze Patterns: Identify common sources of risk and patterns within each category.
d. Expert Judgment
Expert judgment involves leveraging the knowledge and experience of experts to assess risks qualitatively. Experts provide insights based on their past experiences and expertise.

Process
• Select Experts: Identify individuals with relevant expertise.
• Gather Inputs: Conduct interviews, surveys, or workshops to gather expert opinions on risk probability and impact.
• Synthesize Insights: Compile and analyze expert inputs to assess risks qualitatively.

Quantitative Techniques use data and historical information to assign numerical values to probability and impact, allowing for more precise calculations of risk exposure.
Quantitative Risk Assessment Techniques
a. Monte Carlo Simulation
Monte Carlo simulation uses statistical methods to model the probability of different outcomes in a process that cannot easily be predicted due to the intervention of random variables.
Process:
• Define a model of the process or project.
• Identify input variables and their probability distributions.
• Run simulations to generate possible outcomes.
• Analyze the results to determine the probability and impact of risks.
b. Sensitivity Analysis
Sensitivity analysis examines how the variation in input variables affects the outcome of a model.
Process:
• Identify key input variables.
• Vary each input variable within a realistic range while holding others constant.
• Measure the effect on the outcome.
• Identify which variables have the most significant impact on the outcome.
c. Decision Tree Analysis
Decision tree analysis is a visual and analytical decision support tool where decisions and their possible consequences, including risks, are mapped out in a tree-like diagram.
Process:
• Identify decisions and potential outcomes.
• Draw a decision tree with branches representing different choices and outcomes.
• Assign probabilities and values to each outcome.
• Calculate the expected values for different decision paths.
• Choose the path with the highest expected value or lowest risk.
d. Scenario Analysis
Scenario analysis involves evaluating the potential impacts of different hypothetical scenarios on a project or organization.
Process:
• Define various plausible scenarios (e.g., best-case, worst-case, and most likely).
• Assess the impact of each scenario on objectives.
• Identify the likelihood of each scenario occurring.
• Develop strategies to manage risks associated with each scenario.
The risk management process is a structured framework for identifying, assessing, prioritizing, treating, and monitoring potential risks within a project, organization, or any endeavor. It's a cyclical process that requires continuous monitoring and improvement to ensure its effectiveness.
Don’t miss our next virtual Project Management Class - Project Management In Practice scheduled for July 9th-11th, 2024. For more details or enquiries call 08026004965 or send an email to [email protected] to register.