Why Manage Risks Formally?

June 7, 2008 | Author: PM Hut | Filed under: Risk Management

Why Manage Risks Formally? (#2 in the series Know Your Enemy: Software Risk Management)
By Karl E. Wiegers

A formal risk management process provides a number of benefits to both the project team and the development organization as a whole. First, it gives us a structured mechanism to provide visibility into threats to project success. By considering the potential impact of each risk item, we can focus on controlling the most severe risks first. We can combine risk assessment with project estimation to quantify possible schedule slippage if certain risks materialize into problems, thereby coming up with sensible contingency buffers. Sharing what does and does not work to control risks across multiple projects helps projects avoid repeating the mistakes of the past. Without a formal approach, we cannot ensure that our risk management actions will be initiated in a timely fashion, completed as planned, and effective.

Controlling risks has a cost, which we must balance against the potential cost we could incur if the risk is not addressed and does indeed bite us. For example, if we are concerned about the ability of a subcontractor to deliver an essential component on time, we could engage multiple subcontractors to increase the chance that at least one will come through on schedule. That’s an expensive remedy for a problem that may not even exist. Is it worth it? It depends on the down side we incur if indeed the subcontractor dependency causes the project to miss its planned ship date. Only you can decide for each individual situation.

Adapted from “Practical Project Initiation: A Handbook with Tools” (Microsoft Press, 2007), with permission from author.

Karl Wiegers, Ph.D., is Principal Consultant with Process Impact, a software process consulting and education company in Portland, Oregon. Karl’s most recent book is “Practical Project Initiation: A Handbook with Tools.” Karl is also the author of four other books and 170 articles. Karl is a frequent speaker at software conferences and professional society meetings. You can reach Karl through www.projectinitiation.com or www.processimpact.com.

Share this article:
  • Digg
  • del.icio.us
  • Facebook
  • Google
  • blogmarks
  • LinkedIn
  • Reddit
  • StumbleUpon
  • TwitThis
  • Yahoo! Buzz

Related Articles

1 person has left a comment

Karl,
The tradeoff between “managing” the risk and not manageing the risk - from a cost perspective needs some clarification. Not spending money is the risk management choice of “ignore.” The trade space for that decision is actually in the risk management guidelines. While it may be zero cost in terms of mitigation or retirement, the conseqential cost is not zero - as you state.
I’d suggest the first example of subcontractor deliveries is easily mitigated with fine controlled deliverables management rather than multiple vendors - which woudl increase the risk, since managing each is now required, along with confusion in requirements and inconsistent deliverables.
One approach built into the schedule is to include the “plan b” impacts at the point of occurance. As well retirement work can be inline as well.
Including active risk management as part of project management is the current paradigm for projects with any substantial risk elements. “What you can’t see won’t hurt you” is not a strategy for success.

Glen B. Alleman
VP, Program Planning and Controls
Defense and Space
Lewis & Fowler, Denver Colorado

Glen B. Alleman wrote on July 9, 2008 - 9:35 am | Visit Link

feel free to leave a comment

Comment Guidelines: Basic XHTML is allowed (a href, strong, em, code). All line breaks and paragraphs are automatically generated. Off-topic or inappropriate comments will be edited or deleted. Email addresses will never be published. Keep it PG-13 people!

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

All fields marked with " * " are required.

Project Management Categories