3.1.1 Potential benefits from an effective risk management

Figure 1 Potential benefits from an effective risk management
(sourced November 2004, from http://www.hefce.ac.uk/pubs/hefce/2001/01_24.htm )
For the manager or team leader risk management involves developing systematic a systematic approach to:
- Establish the context . Define and identify the organisation and project environments, characteristics, dependencies and stakeholders, their goals and objectives, and the scope and boundaries of the specific risk management process. Develop criteria against which risks are evaluated and identify the structure for risk management. Ensure all assumptions are recorded in the Project Charter or Assumptions List. When the context has been established then the Risk Management Plan can be prepared.
- Identify and define risks . The project's risks are best identified through a collaborative approach involving a wide cross section of stakeholders in the project and recorded in the project's Risk Register. At the start of each project phase, the risks associated with that phase are formally identified through a similar process. All conceivable risks, including 'show stoppers', must be considered. Ensure any certainties are identified as problems and addressed in the project processes.
- Conduct risk analysis. An analysis of the risks is conducted to determine their causes, and estimate their probability and consequences.
- Conduct risk evaluation . The risks are considered and prioritised according to their potential impact on the business and the project, and each risk is assessed to determine its level of acceptability. The Risk Register is updated with the outcomes of the risk analysis and assessment process and identifies the risks that require management and assigns owners to them.
- Develop and implement risk treatments . Risk treatments are developed to cost-effectively reduce, contain and control project risk. Formal risk management reporting mechanisms are also defined.
- Monitor, report, update and manage risks . As risks change during the project, the risk profile is continuously monitored, reviewed and updated. New risks may be identified as more information becomes available and existing risks may be eliminated through the effectiveness of the risk treatments.
(Source: OICT, 2004, http://www.oit.nsw.gov.au/Guidelines/4.3.24.d-Project-RM.asp#a70 )