Industry News  |  In Practice  |  The Bigger Picture  |  Digital Marketing  |  Your Business

Latest Articles

More Web 2.0 Needed In Schools

An influential think-tank calling for more Web 2.0 use in school and technology experts agree, arguing that children should get used to collaborative tools before they enter the workplace.

more

UK Council for Child Internet Safety Launches

The UK Government launched its programme to help protect children from exposure to potentially harmful content on the Internet, including some forms of advertising. New Media Knowledge spoke to AOL, one of the companies involved, to see what real impact the new group would have.

more

US Presidential Election Gets Social

Last week, Twitter launched its US Presidential Election microblogging site and, with social media likely to play a big part in the outcome, politicians this side of the pond should be looking closely at its impact, experts say.

more

Related Articles

Related Events

Making Risk Management Work

Filed under: all articles
By: NMK Created on: March 30th, 2005
Bookmark this article with: Delicious Digg StumbleUpon

The risk management process is just a structured way of dealing with significant uncertainty. All you need to do is determine which objectives are at risk, then identify uncertainties that might affect their achievement...

By Dr David Hillson

The risk management process is not difficult, because it is just a structured way of dealing with significant uncertainty. All you need to do is determine which objectives are at risk, then identify uncertainties that might affect their achievement.

The next step is to prioritise identified risks and decide how to respond, and then take action. But although this process is simple to describe, it seems hard to make it work in practice. And the hardest part of all is the last step – implementation.

For some reason, we seem well able to identify and assess risks, and to devise appropriate responses. The problem arises with putting our plans into action, and actually doing the agreed responses. Why does this happen?

Make time to save time

A common problem is lack of time or effort for response implementation. Many of us are so busy doing our normal tasks that we have no time to do the extra work involved with risk responses. But if we are "too busy to manage risks", then we are "too busy". Since risks by definition are uncertainties which if they occurred would affect accomplishment of our objectives, then addressing them is essential.

Risk responses are not "optional extras", but are vital to the successful achievement of our goals. Removing threats and capturing opportunities should be part of our normal job as we seek to maximise our chances of success. Instead we seem to believe that risk responses are additional tasks, to be performed if and when we get time, and only after we have done all our "proper work" first. Many project teams identify and assess risks, develop response plans and write a risk report, then "file and forget". Actions are not implemented and the risk exposure remains the same. How can we overcome this barrier?

One answer is to treat agreed risk responses as normal work, with the same priority as pre-planned tasks. The following steps might help:

· Ensure that every risk response is fully defined, with a duration, cost, resource requirement, owner, completion criteria etc.
· Add an extra task to the project plan for every agreed response (accepting that this might also require changes to the project budget or timeline).
· Monitor progress on these risk response tasks in exactly the same way as for all other tasks, including requiring progress reports from owners, and reviewing at project meetings.

Legitimacy & motivation

Giving risk responses equal importance with other project tasks will encourage people to implement them. When response owners realise that these actions are important to project success, and that risk responses will be treated as legitimate project tasks, then they will give them the same degree of attention and effort as their other tasks.

Viewing risk responses as "extra work, optional, different" gives them second-class status behind "real work". Accepting that they are valid and essential tasks which make a significant contribution to achieving objectives makes sure that they will be treated seriously and actually implemented. After all, identifying risk responses but not doing them is a complete waste of time. Only when we put agreed responses into action can we change the risk exposure and improve our chances of meeting our goals.

About the Author:

© March 2005, Dr David Hillson PMP FAPM. Dr Hillson is Director of Risk Doctor & Partners. To provide feedback on this Briefing Note, or for more details on how to develop effective risk management, contact the Risk Doctor info@risk-doctor.com, or visit the Risk Doctor website www.risk-doctor.com.

Comments

You must be logged in to comment.

Log into NMK

Register

Lost Password?
Login

Newsletter


For the latest news from NMK enter your email address and click subscribe:


Subscribe