项目风险管理

项目风险管理

RevisedbyBLUEontheafternoonofDecember12,2020.

RiskManagementPlan

for

<project>

<author>

<date>

<version>

TableofContents

TableofContents.................................................

RevisionHistory..................................................

Purpose..........................................................

RolesandResponsibilities........................................

RiskDocumentation................................................

Activities.......................................................

ScheduleforRiskManagementActivities...........................

RiskManagementBudget............................................

RiskManagementTools.............................................

Appendix.SampleRiskDocumentationForm..........................

RevisionHistory

DateReasonForChanges

initialdraft

Name

<author>

Version

draft1

Purpose

Thisdocumentdescribeshowwewillperformthejobofmanagingrisksfor<project>.Itdefinesrolesandresponsibilitiesforparticipantsintheriskprocesses,theriskmanagementactivitiesthatwillbecarriedout,thescheduleandbudgetforriskmanagementactivities,andanytoolsandtechniquesthatwillbeused.

RolesandResponsibilities

Project

Manager

TheProjectManagerwillassignaRiskOfficertotheproject,andidentifythisindividualontheproject’sorganizationchart.TheProjectManagerandothermembersoftheProjectManagementteam<listnamesorroles>shallmeet<statefrequency;biweeklysuggested>toreviewthestatusofallrisk

mitigationefforts,reviewtheexposureassessmentsforanynewriskitems,andredefinetheproject'sTopTenRiskList.

RiskOfficerTheRiskOfficerhasthefollowingresponsibilities

andauthority:

<describewhattheriskofficerwilldo;mightincludecoordinatingriskidentificationandanalysisactivities,maintainingtheproject’srisklist,notifyingprojectmanagementofnewriskitems,reportingriskresolutionstatustomanagement;theRiskOfficershouldnormallynotbetheProjectManager.>

ProjectMemberAssigneda

Risk

TheRiskOfficerwillassigneachnewlyidentifiedrisktoaprojectmember,whowillassesstheexposureandprobabilityfortheriskfactorand

reporttheresultsofthatanalysisbacktotheRisk

Officer.AssignedprojectmembersarealsoresponsibleforperformingthestepsofthemitigationplanandreportingprogresstotheRiskOfficerbiweekly.

RiskDocumentation

RiskList

RiskData

Items

Theriskfactorsidentifiedandmanagedforthisprojectwillbeaccumulatedinarisklist,whichislocated<statewhererisklistislocated;couldbeanappendixtothisplan,orinaseparatedocument,orinadatabaseortoolsomewhere.>Thetenriskitemsthatcurrentlyhavethehighestestimatedriskexposurearereferredtoastheproject’sTopTenRiskList.

Thefollowinginformationwillbestoredforeach

projectrisk:<listanddefineriskdataitems.Some

Risk

Identificatio

n

suggestions:RiskID,classification,description,

probability,impact,riskexposure,firstindicator

thatriskisbecomingaproblem,mitigation

approaches,owner,datedue,contingencyplan,

contingencyplantrigger>

Closing

Risks

Ariskitemcanbeconsideredclosedwhenitmeets

thefollowingcriteria:<example:theplanned

mitigationactionshavebeencompletedandthe

estimatedriskexposureofprobabilitytimesimpact

islessthan2>

Activities

Participants

<Statethetechniquesthatwillbe<statewhois

Task

usedtoidentifyriskfactorsatinvolvedin

thebeginningoftheprojectandonidentifying

anon-goingbasis.Thismayinvolveprojectrisks>

aformalriskassessmentworkshop,

abrainstormingsession,interviews

atthebeginningofeachlifecycle

phase,oruseofananonymousform

availablefromtheproject’sweb

siteforsubmittingriskfactors.

Describeanyconsolidatedlistsof

riskitemsthatwillbeusedto

identifycandidaterisksforthis

project.>

Task

Participants

RiskAnalysis

and

Prioritizatio

n

TheRiskOfficerwillassigneachAssigned

riskfactortoanindividualProjectMember

projectmember,whowillestimate

theprobabilitytheriskcould

becomeaproblem(scaleofandthe

impactifitdoes(eitherrelative

scaleof1-10,orunitsofdollars

orscheduledays,asindicatedby

theRiskOfficer).

RiskOfficer

Theindividualanalyzedrisk

factorsarecollected,reviewed,

andadjustedifnecessary.Thelist

ofriskfactorsissortedby

descendingriskexposure

(probabilitytimesimpact).

<Iftheprojectplanningactivities

willincorporatescheduleorbudget

contingenciesbasedonrisk

analysis,describetheprocessof

estimatingsuchcontingenciesand

communicatingtheinformationto

theProjectManagerorbuilding

thosecontingenciesintothe

projectschedulehere.>

Risk

TaskParticipants

Management

Planning

Thetoptenrisks,orthoseriskRiskOfficer

factorshavinganestimated

exposuregreaterthan<state

exposurethreshold>areassignedto

individualprojectmembersfor

developmentandexecutionofarisk

mitigationplan.<Or,agroup

brainstormingsessionisusedto

definemitigationplansfor

individualriskitemsandtoassign

responsibilitytoindividuals.>

Foreachassignedriskfactor,Project

recommendactionsthatwillreduceMembers

eithertheprobabilityoftherisk

materializingintoaproblem,or

theseverityoftheexposureifit

does.Returnthemitigationplanto

theRiskOfficer.

ThemitigationplansforassignedRiskOfficer

riskitemsarecollatedintoa

Risk

Resolution

Risk

Monitoring

singlelist.ThecompletedTopTen

RiskListiscreatedandmade

publiclyavailableonthe

project’sintranetwebsite.

Participants

Task

EachindividualwhoisresponsibleAssigned

forexecutingariskmitigationIndividual

plancarriesoutthemitigation

activities.

TaskParticipants

<DescribethemethodsandmetricsRiskOfficer

fortrackingtheproject’srisk

statusovertime,andthewayrisk

statuswillbereportedto

management.>

Thestatusandeffectivenessof

Assigned

eachmitigationactionisreported

totheRiskOfficereverytwo

Individual

weeks.

Theprobabilityandimpactforeach

riskitemisreevaluatedand

RiskOfficer

modifiedifappropriate.

Ifanynewriskitemshavebeen

RiskOfficer

identified,theyareanalyzedas

weretheitemsontheoriginalrisk

listandaddedtotherisklist.

TheTopTenRiskListis

RiskOfficer

regeneratedbasedontheupdated

probabilityandimpactforeach

remainingrisk.

Anyriskfactorsforwhich

mitigationactionsarenotbeing

RiskOfficer

effectivelycarriedout,orwhose

riskexposureisrising,maybe

escalatedtoanappropriatelevel

ofmanagementforvisibilityand

action.

Lessons

TaskParticipants

Learned

<IftheprojectwillbestoringRiskOfficer

lessonslearnedaboutmitigationof

specificrisksinadatabase,

describethatdatabaseandprocess

hereandindicatethetimingof

enteringrisk-relatedlessonsinto

thedatabase.>

ScheduleforRiskManagementActivities

Risk

Identificatio

n

RiskList

Risk

Management

Plan

RiskReview

RiskTracking

Ariskworkshopwillbeheldonapproximately

<date>.

Theprioritizedrisklistwillbecompletedandmadeavailabletotheprojectteambyapproximately<date>.

Theriskmanagementplan,withmitigation,

avoidance,orpreventionstrategiesforthetoptenriskitems,willbecompletedbyapproximately<date>.

TheRiskManagementPlanandinitialTopTenRisk

ListwillbereviewedandapprovedbytheProject

Manageronapproximately<date>.

Thestatusofriskmanagementactivitiesand

mitigationsuccesswillberevisitedaspartofthegateexitcriteriaforeachlifecyclephase.Theriskmanagementplanwillbeupdatedatthattime.<Iftheprojectistrackingcumulativeriskexposure,thatwillbeupdatedandreviewedduringatthistime,also.>

RiskManagementBudget

<Describethebudgetavailableformanagingtheproject’srisks>.

RiskManagementTools

<Describeanytoolsthatwillbeusedtostorerisk

information,evaluaterisks,trackstatusofriskitems,orgeneratereportsorchartsdepictingrisk

managementactivityandstatus.Ifspecificquestionnairesordatabaseswillbeusedduringriskidentification,describethemhere.Iflessonslearnedaboutcontrollingtheriskitemswillbestoredinadatabaseforreferencebyfutureprojects,describethatdatabasehere.>

Appendix.SampleRiskDocumentationForm

RiskID:<sequence

number>

Classification:

<riskcategory,.,

fromSEItaxonomy>

ReportDate:<date

thisriskreportwas

lastupdated>

Description:<Describeeachriskintheform“condition–

consequence”.>

Probability:

<What’sthe

likelihoodofthis

Impact:<What’sthe

damageiftherisk

doesbecomea

RiskExposure:

<MultiplyProbability

timesLossto

riskbecomingaproblem