Better Risk Management With Prince2

Step 1 - Having a risk management strategylikelihood in percentage terms and an impact should it
In my experience risk management is something thatoccur in monetary terms. By multiplying one by the
is talked about a lot but rarely done. One problem isother an expected value can be calculated. Totalling
that people don't know who should be doing what.the expected values of all the risks gives a monetary
To help with this Prince2 2009 introduces a Riskfigure that easily shows the exposure of the whole
Management Strategy. It outlines the way in whichproject to risk.
risk will be identified, evaluated and dealt with in aStep 5 - Considering the effect of time on a risk.
project. It shows who should be responsible forPrince2 has always recommended recording when
carrying out the various risk management roles. Iteach risk will occur. It calls this the proximity of the
also sets out how much risk an organisation is willingrisk. But in this latest release it gives examples of
to bear. The strategy is put together at the outsethow you might categorise proximity, such as
of the project; everyone reviews and signs up to it.imminent, in the next stage of the project or after
Step 2 - Risk identification Techniquesthe project. It also recommends considering whether
Where do you start when it comes to identifying allthe probability of the risk occurring and/or the impact
the potential risks in your project? The new manualon the project if they do occur, might vary over
gives a number of approaches. These includetime. Having this information can help focus on risks
reviewing lessons learned from previous projects,that are of a more pressing concern.
carrying out a risk brainstorming session, using anStep 6 - Giving a clearer approach to help define risks
industry specific prompt list showing likely areas ofRather than just thinking about the event that may
risk or creating a risk breakdown structure. The latteror may not occur such as a road collapsing
is a hierarchical diagram like an organisation chart. Itunderneath a heavy load, the new manual considers
can be sub divided in a range of ways, for examplewhat could cause the event. This allows for a deeper
by product, by team or using PESTLE (political risks,analysis of any individual risk. If the road collapses it
economic risks, social risk, technological risks, legalcould be caused by heavy rain, bad driving or initial
risks, environmental risks) It can be used as a focalpoor construction of the road by the council.
point for a workshop to identify all risks in each areaUnderstanding what are the most likely causes for
of the project.each potential risk event, can help implement better
Step 3- Early warning indicatorsmitigation plans to deal with them
It is all too easy for a project manager to myopicallyStep 7 - Focus on opportunities
focus on a small set of performance areas such asRisks can be opportunities. For example a new
work completed to schedule. The new manualtechnology might appear to speed the programming
suggests a range of other early warning indicatorsof a software module. Prince2 2009 gives three
that identify how the project is performing. Forways of approaching an opportunity: exploit it by
example percentage of approvals accomplished,doing something that ensures it occurs, increase the
number of issues being raised and number of defectsprobability or impact of the event occurring or simply
being captured in quality inspections. Reviewing allreject the opportunity. In practice a good project
aspects of a project increases the likelihood ofmanager is always looking for opportunities to
identifying more critical risksimprove their project, but making this explicitly part
Step 4 - Assessing the overall risk exposureof the risk management process, improves the
Prince2 2009 gives an approach to show the overallprobability of spotting more.
risk situation of a project. Each risk is given a