• Implement the action schedules and management measures
• Monitor the implementation
• Periodically review risks and evaluate the need for additional Risk Management
The main output from the process is the definition of action schedules and management measures
and assignment of responsibility for implementation.
For designated undertakings, the Risk Management Plan summarises the risk analysis process and
documents in detail the action strategies for managing individual risks.
Monitoring and evaluating implementation is essential.
4.1 Proposal familiarisation
As a preparatory step, gain familiarity with the proposed project or activity and identify key parameters
and assumptions. This should follow definition of the Risk Management brief and assignment of
responsibilities for undertaking the Risk Management evaluation. Familiarisation can be seen to
comprise three activities:
Define objectives
This involves the Risk Management group becoming familiar with:
• the nature and scope of the proposal, its key objectives, and
• the relationship between these and the agency’s objectives and strategies.
This step links Risk Management into the agency’s main strategic plans, including its service, capital
investment, asset maintenance, and disposal strategies and into the agency’s procurement,
operating, maintenance and disposal procedures.
Identify criteria
The assessment criteria for a proposal or project are concerned with how well its objectives will be
met and how appropriate are these objectives. They will reflect the principal purposes of the proposal
and its means of execution and assist in defining key elements.
In the planning stages of the asset cycle, the criteria will reflect strategic concerns, while in the
delivery, maintenance and disposal stages the criteria are likely to concern the efficient completion of
procurement, cost control, service delivery, and quality.
Define key elements
This involves separating the proposal or project into a set of base elements for structuring the
analysis.
The initial separation is usually into the major items or activities, but the detailed structure depends on
the nature of the associated risks.
A broad view of the asset or activity at this stage is more appropriate than a detailed one to
concentrate focus on the main issues and to establish a balanced framework for the analysis.
In practice, a range of 20 to 50 items or elements is commonly targeted. The items should be distinct
and meaningful, and cover the entire proposal scope or procurement and operational aspects.
Proposal
familiarisation
4.2 Risk analysis
Identify risks
The analysis begins with listing the risks that might affect each key element of the project. The aim is
to generate a comprehensive list of the relevant risks and document what each one involves. The
analysis should include a description of the risk and how it might arise, possible initiating factors, the
main assumptions and a list of the principal sources of information.
There are several ways to identify risks:
• risk checklists provide a useful starting point for some projects. Agencies carrying out many
similar projects can construct their own checklists based on their experience or project databases,
and/or draw on information from specialist industry, research, insurance, or management
expertise.
• examining similar current or previous projects, risk analyses or project evaluations.
• brainstorming or workshopping may be valuable for projects involving new or unusual risks,
innovative management arrangements or to develop initial checklists.
Risk Management teams comprising multi-disciplinary backgrounds are well suited to this phase.
They can be supported by the many specialist techniques applicable to particular kinds of projects or
risks. For example, hazard analysis may be directed to specific safety issues or complex
environmental applications, while failure modes analysis can be used for examining risks in technical
systems.
Assess likelihoods & consequences
Evaluation
Determine risk factors
Rank risks
Identify major and moderate risks
Major risks
Develop Risk Action Schedule
:
Moderate risks:
Specify management measures
Screen minor risks
Minor risks:
Accept risk
Identify risks
Checklists, similar projects, brainstorming
Risk
analysis