PRINCE2 risk assessment
The Risk Management Approach document contains, apart from other information, how risk assessment will be carried out and, more importantly, the tools and approaches used for risk assessment. Every project is different, as is the organization, culture and environment within which it takes place. That means that your risk assessment approach and the scales used for the various tools and techniques will need to be chosen appropriately.
Estimating or Risk Assessment in a PRINCE2 project can be done in a variety of ways, and here are some of them:
Qualitative Risk Assessment.
This is just a fancy name for calculating the probability and impact of each risk. Then, rank the risks on that basis and typically actively manage the top 20% of the most severe risks while keeping a watchful eye on the remaining 80% of the rest.
Quantitative Risk Assessment.
The primary technique for this is the Probability impact grid.
The Probability impact grid. This grid contains ranking values that may be used to rank threats and opportunities qualitatively. The probability scales are measures of probability derived from percentages, and the impact scales are selected to reflect the level of impact on project objectives during PRINCE2 risk assessment.
P-I Grid for risk assessment
The values within the grid cells are the combination of a certain probability and impact, and the severity of the risk, along with its risk assessment, can be determined by multiplying the probability by the impact. A probability impact grid can be used to provide a risk assessment of the severity of a risk and enable risks to be ranked so that management time and effort can be prioritized.
For example, the Project Board may set their risk tolerance at any risk with a value of greater than 0.2, and they may require a proactive response for any risk with a value of greater than 0.05
Pareto analysis This technique ranks or orders risks after risk assessment to determine the order in which they should be addressed. Pareto analysis can be used to focus management efforts on those risks that have the potential to have the most significant impact on the project objectives.
Probability trees. These are graphical representations of possible events resulting from given circumstances. A probability tree can be used to predict an outcome in a qualitative way when historical data is used to populate the likelihood of each event happening. Probability trees assist in communicating to project participants or decision-makers the possibility of the different possible outcomes to a set of circumstances as part of risk assessment.
Expected value. This technique quantifies risk by combining the cost of the risk impact with the probability of the risk occurring. Expected value is applicable when a tangible measure of risk is required to enable risks to be prioritized. For example, if the cost of risk was £160,000 and its likelihood of occurrence was estimated at 25%, then the expected value would be £40,000
Identifying risks in risk assessment
There are many ways of identifying possible risks before risk assessment. Developing as many as possible is essential, even if they are discounted later. Remember, any risk not identified may cause your project to fail! Here are some examples:
Risk prompt lists. These publicly available lists categorize risks into types or areas and are generally relevant to a wide range of projects. Risk prompt lists are valuable aids to help stimulate thinking about sources of risk in the broadest context.
Brainstorming. This enables group thinking, which can be more productive than individual thinking. However, it is essential to avoid criticism during the brainstorming as this can stop people from contributing. In addition to identifying risks, brainstorming can also be used to understand the stakeholders’ views of the risks identified.
Risk breakdown structure This is a hierarchical decomposition of the project environment assembled to illustrate potential sources of risk. Each descending level represents an increasingly detailed definition of sources of risk to the project.
The structure acts as a prompt and an aid to support the project management team in thinking through the potential sources of risk to the objectives.
Risk checklists. These are in-house lists of risks that have either been identified or have occurred on previous similar projects. Risk checklists are valuable aids to ensure that risks identified in previous projects are not overlooked.
Review lessons. Risks are driven by uncertainty, so one of the most effective ways to reduce uncertainty is to review similar previous projects to see what threats and opportunities affected them.
There are numerous ways to break down risk, and creating more than one list may be helpful. For example, a risk breakdown structure could be broken down by PESTLE (political, economic, sociological, technological, legal/legislative, environmental), product breakdown structure, stage, benefits/objectives etc. These structures will help to identify appropriate risk owners to develop responses.
There are many ways to carry out a risk assessment, and here are some of the most often-used techniques:
Risk models Take, for example, Monte Carlo analysis. This model enables the simulation of ’what if’ scenarios using random numbers to determine whether each risk within a given range occurs. The simulations are repeatedly run to predict the ’average’ level of risk to the project’s time or cost. The scenarios can also be used to model extreme cases (e.g. if nearly all the risks occur)
Expected monetary value This technique takes the anticipated values of several risks and sums them to arrive at an overall value. It provides a quick and easy risk assessment of a group of risks to understand their combined effect.
PRINCE2® 7 Foundation and Practitioner
Learn PRINCE2® 7 Foundation and Practitioner Online
** Enhance your PRINCE2 career now **
PRINCE2® Masterclass gives you the skills necessary to manage projects effectively and achieve your objectives.
Get 7 days a week 12 months one to one coaching with ex PRINCE2 examiner Dave Litten.
PRINCE2® is a globally recognized project management framework. By completing both the Foundation and Practitioner courses through our self-paced e-learning, you will develop an understanding of the methodology and learn how to effectively adapt it to any project.
The PRINCE2® 7 Foundation and Practitioner Masterclass is PeopleCert Accredited and guarantees to take you from PRINCE2 Novice to PRINCE2 Practitioner with our famous video learning, study guides and practice exams.
What Does the Masterclass Cover?
The PRINCE2 Foundation examination assesses your knowledge and comprehension of the PRINCE2 project management methodology as detailed in the syllabus. The PRINCE2 Practitioner examination, on the other hand, gauges your ability to apply and tailor the PRINCE2 method. Candidates who pass the Practitioner exam should be able to start implementing the method on an actual project with some guidance. However, their effectiveness may differ based on their experience in project management, the complexity of the project, and the level of support they receive in their work environment.
