11. Risk Flashcards
(47 cards)
What is the process of risk management?
- Plan risk management
- Identify risks
- Perform qualitative risk analysis
- Perform quantitative risk analysis
- Plan risk response
- Implement risk responses
- Monitor risks
What is the key output of the Plan risk management process?
Risk management plan
What are the main contents of the Risk management plan?
- Risk strategy
- Methodology
- Roles and responsibilities
- Funding
- Timing
- Risk categories
- Stakeholder risk appetite/thresholds
- Definitions or probability and impact
- Reporting
- Tracking
What are the key outputs of the Identify Risks process?
- Risk register
* Risk report
What key outputs of the Perform Qualitative Risk Analysis process are added to the risk register?
- Risk ranking for the project compared to other projects
- List of prioritised risks and their probability and impact ratings
- Results of other risk parameter assessments
- Risks grouped by categories
- List of risks for additional analysis and response
- List of risks requiring additional analysis in the near term
- Watch list (noncritical risks)
What key outputs of the Perform Quantitative Risk Analysis process are added to the risk register?
- Prioritised list of quantified individual project risks
- The quantified probability of meeting project objectives
- Trends in quantitative risk analysis
- Initial contingency time and cost reserves needed
- Assessment of overall project risk exposure
- Possible realistic and achievable completion dates and project costs
- Recommended risk responses
What key outputs of the Plan Risk Responses process are added to the risk register?
- Residual risks
- Contingency plans
- Fallback plans
- Risk owners
- Secondary risks
- Risk triggers
- Contracts
- Reserves (contingency) for time and cost
What are the key outputs of the Monitor Risks process?
- Work performance information
- Risk register updates
- Change requests
- Project management plan updates
- OPAs updates
What key outputs of the Monitor Risks process are added to the risk register?
- Outcomes of risk reassessments and risk audits
- Results of implemented risk responses
- Updates to previous parts of risk management
- Closing of risks that are no longer applicable
- Details of what happened when risks occurred
- Lessons learned
What are the contents of the risk register?
- List of risks
- Potential risk owners
- Potential risk responses (Avoid, Transfer, Mitigate, Accept)
- Root causes or risks
- Risk triggers
- Potential impact of identifies Threats and Opportunities
- When each risk will occur
What is a risk?
A future occurrence that may or may not happen that can have a positive (opportunity) or negative (threat) impact on the project.
What are the four key factors that need to be determined for each risk?
- Probability
- Impact
- Timing
- Frequency
Define risk appetite (tolerance) and risk threshold.
- Risk appetite: a general high level description of the acceptable level of risk to an individual or organisation.
- Risk threshold: the specific point at which risk becomes unacceptable.
What are the inputs of the risk management process?
- Project charter
- Project management plan
- Project documents
- EEFs
- OPAs
- Agreements
- Procurement documentation
- Work performance data and reports
Name the risk categories.
- External
- Internal
- Technical
- Commercial
- Unforeseeable
On top of the categories of risk, provide some additional examples or sources of risk.
- Scope
- Schedule
- Cost
- Quality
- Resources
- Customer/stakeholder satisfaction
What is a risk breakdown structure?
An organisational or hierarchical chart that can help identify and document risk categories.
Name the categories of non-event risks.
- Ambiguity (lack of understanding)
* Variability (inability to predict changes)
What are some examples of risk identification techniques?
- Brainstorming
- Checklist analysis
- interviewing
- Root cause analysis
- Assumption analysis
- Constraint analysis
- SWOT analysis
- Documentation reviews
- Prompt lists
- Facilitation
What is assumption analysis?
When is it done?
Assessing the assumptions made on the project and determining whether they are valid.
It is done during Identify risks.
What is the purpose of a prompt list?
A prompt list is a predetermined list of risk categories that might act as a source of individual and overall project risk.
A prompt list can help a project team identify risks to individual elements of the project as well as risks to the overall project.
What is the purpose of a risk report?
The purpose of a risk report is to keep stakeholders apprised of risk management efforts and outcomes.
What is a risk data quality assessment? When is it done?
Determining how accurate, reliable, and well understood the risk information is.
It is done during Perform Qualitative risk analysis.
What is a data representation technique that can be used during the Perform Qualitative Risk Analysis process?
A probability and impact matrix