1. Projmgmt-1/33 DePaul University Project Management I - Risk Management Instructor: David A. Lash

2. Projmgmt-2/33 What Is Risk Management? u The means by which uncertainty is systematically identified and managed to increase likelihood of success u Risk might be obvious: – Development of a new drug to treat cancel in a new way u Or less obvious: – Large contract requires execution of 1 or more sub-contractors (how will ensure they will deliver?) – Turn-over in industry may result in loss of key people on project – Departmental reorganization may disrupt project

3. Projmgmt-3/33 Why Risk Management? u Used within Insurance Companies as part of SOP u Project Management Proactively understand and manage risk of: – being late – being over budget – uncertainty – quality assurance u An iterative process to identify and manage risk throughout the project u Risks exists at business level (select right project) and project level (execute project right)

4. Projmgmt-4/33 Level Of Risk Management? u Risks exists at business level - select right project u and project level - execution of the project – For example, building a new office building on- time and on-cost - project level responsibility – If turns out there is no demand for office space (once done) - business level responsibility. u Project managers are most concerned with project level execution u Program managers or functional managers or senior management with business risk

5. Projmgmt-5/33 PM Should Be Defined Process u Charter – Purpose – review and publish u SOW – A. Document goals, scope deliverables HL budget estimate – Review with Project board u Communication Plan – Document communication methods of various level – Review with project board, various stakeholders u Risk Strategy u Project Plan u Execute HL Plan LL Plan

6. Projmgmt-6/33 Risk Management Influence Risk mgmt influences project plan and rules

7. Projmgmt-7/33 Risk Management Framework u Three main steps I. Identify - find the sources of project risk II. Develop Response - As risks are identified determine how you will mitigate them u May result in a change in change in documents that define project rules (e.g, scope change) III. Control - Implement strategies and monitor effect of changes

8. Projmgmt-8/33 Risk Management Process Analyze the source of risks Risk Identification Response Development Control Known Risks Risk Management Plan Define the risk & potential neg impact Assign probability Develop risk reduction strategy Implement the risk strategy Continue to monitor for new risks New Risks

9. Projmgmt-9/33 Risk Management Process Analyze the source of risks Risk Identification Response Development Control Known Risks Risk Management Plan Define the risk & potential neg impact Assign probability Develop risk reduction strategy Implement the risk strategy Continue to monitor for new risks New Risks

10. Projmgmt-10/33 Step I - Identify Risk There are 4 techniques to identify risks 1.Asking stakeholders 2. Developing a risk profile list 3. Learning from similar projects 4. Focus on schedule and budget risk Will describe each technique

11. Projmgmt-11/33 1. Identify Risk - Stakeholders Two techniques to identify risks. 1. Brainstorming sessions 2. Interviewing Techniques are most useful when trying to identify what could go wrong (pessimistic).

12. Projmgmt-12/33 1. Identify Risk - Stakeholders Two techniques to identify risks. 1. Brainstorming sessions - gather stakeholder team to: - Include all stakeholders (possibly including customers) - Generate a list of potential risks (without critical evaluation) - Concentrate on risk identification (not evaluation of response) - After generating list, combine similar items and order them based on probability.

13. Projmgmt-13/33 1. Identify Risk - Interviewing 2. Interviewing - develop specific questions to think about risk aspects of the project - If a risk profile template is available could use that - Consistent, quality interviews requires preparation - Review interview questions with team - Consider a test run of interview before holding sessions In reality you might combine brainstorming with interviews

14. Projmgmt-14/33 Step I - Identify Risk There are 4 techniques to identify risks 1.Asking stakeholders 2. Developing a risk profile list 3. Learning from similar projects 4. Focus on schedule and budget risk Will describe each technique

15. Projmgmt-15/33 2. Identify Risk - Risk Profile Risk profile is a defined sheet to prompt for areas of risk (example next page) The risk profile should: be industry specific be organization specific include product and project management risk predict the magnitude of the risk A risk profile (or template) might be gathered from post-mortem reviews of projects. Develop categories of risks under each category develop possible risk areas refine over time

16. Projmgmt-16/33 Risk Profile - Example (See page 84 table 5.1) Project Team - 1. How many people on the project? 2. How many are dedicated to project? 3. What percent are less then 20%? 4. What is the experience level of team? 5. How many geographic locations? Customer - 1. How will product affect customer organization? Need to reorganize? 2. How much training is required? 3.How geographically dispersed are customers?

17. Projmgmt-17/33 Step I - Identify Risk There are 4 techniques to identify risks 1.Asking stakeholders 2. Developing a risk profile list 3. Learning from similar projects 4. Focus on schedule and budget risk Will describe each technique

18. Projmgmt-18/33 3. Identify Risk - Historical Records You may be able to find historical records on: planned and actual performance records showing how accurate estimates were problem logs showing areas of unexpected events Postproject reviews Customer satisfaction records Your own personal experiences or experiences of other project managers

19. Projmgmt-19/33 Step I - Identify Risk There are 4 techniques to identify risks 1.Asking stakeholders 2. Developing a risk profile list 3. Learning from similar projects 4. Focus on schedule and budget risk Will describe each technique

20. Projmgmt-20/33 4. Identify Risk - Budgets & Schedules For each task will need to develop time & cost estimates How accurate do you believe estimates are? How definite are estimates? What parts are uncertain? How can you shore those up?

21. Projmgmt-21/33 Risk Management Process Analyze the source of risks Risk Identification Response Development Control Known Risks Risk Management Plan Define the risk & potential neg impact Assign probability Develop risk reduction strategy Implement the risk strategy Continue to monitor for new risks New Risks

22. Projmgmt-22/33 Step II - Risk Response Strategy Not all risks are equally important and/or likely likely. Need a plan that will 1. Identify the severity of risk 2. Identify the probability of the risk 3. Develop strategy to deal with the risk

23. Projmgmt-23/33 1. Defining the Risk Severity For each risk need to identify the: Condition - description of the risk situation Consequence - what are possible negative outcomes The more specific the better The project requires the use of technology that is new to team The state agency requires that all diagrams developed with new software tool that our technical writers have not used. In addition, the only boring machine for soil conditions is a complex product and only been used before a couple times.

24. Projmgmt-24/33 1-2. Risk Severity - Probability Condition - soil conditions require a complex boring machine with which we have little experience Consequence - Improper use of machine may damage machine and/or riverbed. Machine damage could be from 50-250K Riverbed damage may prevent future contracts Probabilities- 75K of equipment damage - 20% 200K of equipment damage - 20% no damage at all 60% Probable cost of damage - 55K ( 200*.2 + 75*.2 = 55k )

25. Projmgmt-25/33 3. Defining the Risk Strategy Strategy - Hire operator from equipment provider for estimated cost of 10K. (any damage by their operator paid by them). Adds 10K to cost of project but reduces possible additional cost and schedule risk

26. Projmgmt-26/33 Another Example Condition - required that all diagrams be developed with a tool that tech writers don’t know. Consequence - Document generation and management tasks will take longer. Possibly causing rework. Probabilities- Work may be 25% slower. (Since everyone new to tool would work at junior level VS senior.) Probable labor cost: 1.25*20=25 Probable schedule: 1.25*4 mon = 5 mon

27. Projmgmt-27/33 Another Example - 2 Strategy - Send all technical writers to 2 day course on new tool. Costs: $2,200 and will reduce training factor to 1.1. Make 1 tech writer a tool expert to exercise tool and create templates for others to reduce productivity factor to 1.0.

28. Projmgmt-28/33 Possible Format Example Might organize material in a table # Risk Risk Risk Risk Cond Consequence Prob Strategies (H,M,L) 1. Loss of Late Project H Increase project Staff documentation. Require formal reviews. However estimation of risk costs can be very useful

29. Projmgmt-29/33 Risk Management Process Analyze the source of risks Risk Identification Response Development Control Known Risks Risk Management Plan Define the risk & potential neg impact Assign probability Develop risk reduction strategy Implement the risk strategy Continue to monitor for new risks New Risks

30. Projmgmt-30/33 Step Three: Control Risk Control - not a 1-shot step Monitor risks like monitor project execution periodic risk review with Project Board evaluate status of identified risks identify new risks Create a risk control log Someone responsible for each risk Rank risks by severity Update periodically

31. Projmgmt-31/33 Risk Control Log

32. Projmgmt-32/33 Risk Management Process Analyze the source of risks Risk Identification Response Development Control Known Risks Risk Management Plan Define the risk & potential neg impact Assign probability Develop risk reduction strategy Implement the risk strategy Continue to monitor for new risks New Risks

33. Projmgmt-33/33 Risk Management Risk Issues - For each selected project: a. develop a risk management plan. - Should include conditions, consequences, strategies b. develop a risk control log.