The term risk management refers to the systematic application of procedures to the tasks of identifying and assessing risks, and then planning and implementing risk responses.
This provides a disciplined environment for proactive decision making.
For risk management to be effective, risks need to be:
IdentifiedThis includes risks being considered that could affect the achievement of the project’s objectives, and then described to ensure that there is a common understanding of these risks.
AssessedThis includes ensuring that each risk can be ranked in terms of estimated likelihood, impact and immediacy, and understanding the overall level of risk associated with the project.
ControlledThis includes identifying appropriate responses to risks, assigning risk owners, and then executing, monitoring and controlling these responses.
Risk management applies from the strategic, operational, programme and project perspectives.
The approach to the management of risk can be common across all of these perspectives but risk management procedures should be tailored to suit each one. See the diagram for organizational perspectives.
Risk management is a large area and is covered in depth in ‘The Complete Risk Management package’.
PRINCE2® is a Registered Trade Mark of the Office of Government Commerce in the United Kingdom and other countries.