Upload
torsten-koerting
View
2.320
Download
0
Tags:
Embed Size (px)
DESCRIPTION
Presentation on Risk Management Tools, like Risk Register, Risk Profile Presentation Options, How to facilitate a Risk Assessment and effective Processes for day to day application of Risk Management in your Project
Citation preview
www.torstenkoerting.com – [email protected]
Risk ManagementPresenter
Torsten J. Koerting
www.torstenkoerting.com
Session #
www.torstenkoerting.com – [email protected] – [email protected]
T H A N KY O U
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected] – [email protected]
www.torstenkoerting.com – [email protected]
What are we going totalk about today
• NO standard stuff about Risk Management
• Get more ideas• Interact and share• Increase your toolbox
www.torstenkoerting.com – [email protected]
Risk Mgmt Standard (AS/NZS 4360)
www.torstenkoerting.com – [email protected]
1.Introduction
2.Why
3.Project Register
4.Risk Assessment
5.Effective Process
6.Risk Profile presentation
7.Project Health Check
Agenda
www.torstenkoerting.com – [email protected]… A U D I E N C E …
• Introduce yourselfWho are you?What are you?Why are you here?
www.torstenkoerting.com – [email protected]
1.Introduction
2.Why
3.Project Register
4.Risk Assessment
5.Effective Process
6.Risk Profile presentation
7.Project Health Check
Agenda
www.torstenkoerting.com – [email protected] – [email protected]
Why does Risk Management becomes
MORE and more important ?
www.torstenkoerting.com – [email protected] – [email protected]
The Worldis flat
InconvenientTruth
The Worldis changing
www.torstenkoerting.com – [email protected] – [email protected]
The Worldis flat
1.The Fall of the Berlin Wall2.The Internet3.Work-Flow Software4.Open-Sourcing5.Outsourcing6.Off-Shoring7.Supply-Chaining8.In-Sourcing9.In-Forming10.Information Steroids
InconvenientTruth
1.Global WarmingSea Levels risingWater shortageMore storms than everLakes disappearMore wildfires
2.Shortage in ResourcesResource shortageWar for resources
The Worldis changing
1.Financial Crisis2.Terrorism3.Increase of Knowledge4.Growth in Population5.Flatter6.Warmer
www.torstenkoerting.com – [email protected] – [email protected]
What does all this mean for usas the Project Managers ?
?
www.torstenkoerting.com – [email protected] – [email protected]
The Impact :
1.Increased Complexity
2.Increased Competition
3.Dynamics of Change
? ? ?
1.Introduction
2.Why
3.Project Register
4.Risk Assessment
5.Effective Process
6.Risk Profile presentation
7.Project Health Check
Agenda
Risk Mgmt Standard (AS/NZS 4360)
Risk Register
• Purpose• What is it and how is it structured• Critical success factors• Audience• Discuss different options
Private, Government, etc.
and discussCharacteristics, Pro’s and Con’s
Risk Register – What is it ?• records details of all the risks identified at the
beginning and during the life of the project
• their grading in terms of likelihood of occurring and seriousness of impact on the project
• initial plans for mitigating each high level risk
• the costs and responsibilities of the prescribed mitigation strategies and subsequent results.
Risk Register - holds• a description of each risk and how it will affect the
project• an assessment of the likelihood it will occur and the
possible seriousness/impact if it does occur (low, medium, high)
• a grading of each risk according to company standards
• who is responsible for managing the risk• an outline of proposed mitigation actions
(preventative and contingency)• in larger projects, costings for each mitigation
strategy
Risk Register – why ?
• provide a useful tool for managing and reducing the risks• document risk mitigation strategies being pursued in response
to the identified risks and their grading in terms of likelihood and seriousness
• provide the Project Sponsor, Steering Committee/senior management with a documented framework from which risk status can be reported
• ensure the communication of risk management issues to key stakeholders
• provide a mechanism for seeking and acting on feedback to encourage the involvement of the key stakeholders
• identify the mitigation actions required for implementation of the risk management plan and associated costings
Risk Register – Critical Success Factors
• Needs to be filled
Risk Assessment
• Needs to be up to date
Process
• Needs to be complete
special Risks
• Needs to be communicated
Presentation
Risk Register – Structureoption 1 (private industry)
• IdentificationDate, Risk, Description
• Qualitative AnalysisType, Probability, Impact
• Quantitative AnalysisProbability (%), Effect ($ or days)
• Response StrategyStrategy, Response Action, Affected Phase
• Monitoring and ControlResponsibility, Date, Comments
Risk Register – Structure option 1 (private industry)
• IdentificationDate, Risk, Description
Risk Register – Structure option 1 (private industry)
• Qualitative AnalysisType, Probability, Impact
Risk Register – Structureoption 1 (private industry)
• Quantitative AnalysisProbability (%), Effect ($ or days)
Risk Register – Structure option 1 (private industry)
• Response StrategyStrategy, Response Action, Affected Phase
Risk Register – Structure option 1 (private industry)
• Monitoring and ControlResponsibility, Date, Comments
Risk Register – Structure option 1 (private industry)
• Pro’s• Easy to use• Information in one spot• Covers all relevant areas• Not overburdened
• Con’s• No View (Risk and Cost) after Likelihood• Doesn’t identify Options• No Comprehensive Action
Risk Register – Structureoption 2 (Airline)
• RiskRisk, Status
Risk Register – Structureoption 2 (Airline)
• Current Risk ProfileDimension, Current Controls, Consequence, Likelihood, Control Effectiveness, Risk Priority, Risk Severity, Accept or Treat
Risk Register – Structureoption 2 (Airline)
• Proposed Risk ProfileTreatment and Actions, Responsibility, Due Date, Revised Consequence, Revised Likelihood, Revised Control Effectiveness, Revised Risk Priority, Risk Severity, Accept or Treat, Last Review Date, Next Review Date
Risk Register – Structure option 2 (Airline)
• Pro’s• Comprehensive Calculation
(good for presentation later one)• All in one place
• Con’s• Might overburden immature organizations or staff• Hard to explain• Still subjective
Risk Register – Structureoption 3 (Government)
• RiskDescription of Risk, Impact on ProjectId Description of Risk
(including any identified ‘triggers’)
Impact on Project (Identify consequences 1)
Asses
smen
t of
Lik
eliho
od
Asses
smen
t of
Se
rious
ness
Gr
ade
(com
bined
Lik
elihoo
d and
Se
riousn
ess)
Change Date of Review
Mitigation Actions (Preventative or Contingency)
Responsibility for mitigation action(s)
Cost Timeline for mitigation action(s)
Work Breakdown Structure
<n> <A “newspaper headline” style statement. Also identify relevant triggers that may cause the risk to be realised.>
<Describe the nature of the risk and the impact on the project if the risk is not mitigated or managed>
<Change in Grade since last review>
<Date of last review>
<Specify planned mitigation strategies: Preventative
(implement immediately)
Contingency (implement if/when risk occurs).>
<Specify who is responsible for undertaking each mitigation action(s)>
<Specify timeframe for mitigation action(s) to be completed by>
This is to indicate that the identified mitigation action has been included in the WBS (workplan).
1 In larger projects, the consequences of the threat may not be evident, and noting them under each risk or in a separate column can be useful in identifying appropriate mitigation actions.
Risk Register – Structureoption 3 (Government)
• Qualitative Assessment and ChangeLikelihood, Seriousness, Grade, ChangeId Description of Risk
(including any identified ‘triggers’)
Impact on Project (Identify consequences 1)
Asse
ssme
nt of
Lik
eliho
od
Asse
ssme
nt of
Se
rious
ness
Gr
ade
(com
bined
Lik
eliho
od an
d Se
rious
ness
)
Change Date of Review
Mitigation Actions (Preventative or Contingency)
Responsibility for mitigation action(s)
Cost Timeline for mitigation action(s)
Work Breakdown Structure
<n> <A “newspaper headline” style statement. Also identify relevant triggers that may cause the risk to be realised.>
<Describe the nature of the risk and the impact on the project if the risk is not mitigated or managed>
<Change in Grade since last review>
<Date of last review>
<Specify planned mitigation strategies: Preventative
(implement immediately)
Contingency (implement if/when risk occurs).>
<Specify who is responsible for undertaking each mitigation action(s)>
<Specify timeframe for mitigation action(s) to be completed by>
This is to indicate that the identified mitigation action has been included in the WBS (workplan).
1 In larger projects, the consequences of the threat may not be evident, and noting them under each risk or in a separate column can be useful in identifying appropriate mitigation actions.
Risk Register – Structureoption 3 (Government)
• MitigationMitigation Actions, Responsibility, Cost, Timeline, WBS
Id Description of Risk (including any identified ‘triggers’)
Impact on Project (Identify consequences 1)
Ass
essm
ent o
f
Like
lihoo
d
Ass
essm
ent o
f
Ser
ious
ness
Gra
de
(co
mbi
ned
Like
lihoo
d an
d S
erio
usne
ss)
Change Date of Review
Mitigation Actions (Preventative or Contingency)
Responsibility for mitigation action(s)
Cost Timeline for mitigation action(s)
Work Breakdown Structure
<n> <A “newspaper headline” style statement. Also identify relevant triggers that may cause the risk to be realised.>
<Describe the nature of the risk and the impact on the project if the risk is not mitigated or managed>
<Change in Grade since last review>
<Date of last review>
<Specify planned mitigation strategies: Preventative
(implement immediately)
Contingency (implement if/when risk occurs).>
<Specify who is responsible for undertaking each mitigation action(s)>
<Specify timeframe for mitigation action(s) to be completed by>
This is to indicate that the identified mitigation action has been included in the WBS (workplan).
1 In larger projects, the consequences of the threat may not be evident, and noting them under each risk or in a separate column can be useful in identifying appropriate mitigation actions.
Risk Register – Structure option 3 (Government)
• Pro’s• Straight forward• Simple
• Con’s• Hard to present risk profile based on it• Format• Cost of Risk vs. Cost of Mitigation
Risk Register – Structureoption 4 (Finance / Banking)
• RiskDescription of Risk, Project Stream, Work package
Risk Register – Structureoption 4 (Finance / Banking)
• Risk DescriptorsDescription of Risk, Project Stream, Work package
Description of source of identified risk.
Example:Controlling has raised cost-rates
Financial RiskFunctional RiskTechnology RiskTimeline RiskResource RiskInformation Security RiskDisaster Recovery RiskRegulatory RiskReputational RiskSupplier Risk
Date CostTarget DateQualityBusinessClient
Project InitiationRequirementDesignDevelopmentTestingDeploymentProject closureMiscellaneous
Description of loss-occurrence at which the estimation and incident rate are based.
Example: overdraft of budget with difference of old/new charge-rate.
Risk Register – Structureoption 4 (Finance / Banking)
• Risk DescriptorsDescription of Risk, Project Stream, Work package
Calculation of probability that risk will happen (in %)
Example:increasing of charge-rate are established by controlling-department. in this case the probability is 100 %
Rating from project-management of impacts to the project-success 6 = critical 5 = very high 4 = high 3 = medium 2 = low 1 = almost not presentExample:4 = Medium if the profitability of the project is in question.2 = low, if an increase in budget or overdrawing of a Budget is possible
Estimated costs (max. loss-occurrence) to the project, if risk will happen
CostTarget DateQualityBusinessClient
AnalyzedClosedIssueNewCommunicatedEscalated
Risk Register – Structureoption 4 (Finance / Banking)
• Final CommentsRemarks, Communication, Date
Risk Register – Structureoption 4 (Finance / Banking)
• Risk Remedial ActionsRemedial Actions, Documents, Expected Results
Possible strategies:- Accept (Risk is suitable and requires no intervention.)- Transfer (The risk will transfer by regulations, e.g., by the project
order on the principal, e.g., assumption of costs in the case of an incoming risk.)
- Reduce (In the approach, processes are taken up in the project
plan to minimize the risk or to remove)- Risk Contingency Plan (In the approach processes are taken up in the project
plan to minimize the risk or to remove.)For the chosen Strategies no concrete description/ explanation is given.
Description of the expected results of the Risk-reducing measures. .Example:Arrangement with customers w/function reduction and therefore saving of employee's days.
If subsequent risks arise from the remedial actions, the Risk-Id of these new risks, which is to be assigned newly, must be referred.
Risk Register – Structureoption 4 (Finance / Banking)
• After Risk Remedial ActionsProbability, Rate of Consequences, Risk-Rate , Responsibility
Likelihood that the described risk can still enter after the carried out risk reduction measures. information in %)
6 = critical 5 = very high 4 = high 3 = medium 2 = low 1 = nearly not present 0 = not present
Appraisal of the project management for which effect the called risk has on the project success after the carried out risk reduction measures. 6 = critical 5 = very high 4 = high 3 = medium 2 = low 1 = nearly not present 0 = not present
Risk Register – Structure option 4 (Finance / Banking)
• Pro’s• Very comprehensive• Great for analysis• Clear Structure and guidance
• Con’s• Needs two tabs for Risk and Mitigation• Might overburden some
… A U D I E N C E …
• What kind ofStructures did you use ?
• What fieldshave you seen ?
• Challenges ?
Risk Register – Summary !
• Many options to choose from
• Always need to be adapted to companies standards and maturity
• Should support critical success factors relevant for your company
Questions …
1.Introduction
2.Why
3.Project Register
4.Risk Assessment
5.Effective Process
6.Risk Profile presentation
7.Project Health Check
Agenda
Risk Mgmt Standard (AS/NZS 4360)
Risk Assessment - Definition• Risk assessment is a common first step in a risk
management process.• Risk assessment is the determination of
quantitative and qualitative value of risk related to a concrete situation and a recognized threat (also called hazard).
Challenges
• How to set the scene• Identify risks without knowing
what a risk is• Keep the audience in the room and
engaged• Take them on a journey
Way’s how to do it !
• Ask the question:What kind of risks do you see ?
• Go based on questionnaire !
• Domains of Change(Location, Data, Technology, Processes, People, etc.)
• The ‘Diamond Model’
Risk Assessment approach
• Set the scene• Establish the Context• Identify Risks• Analyse and Evaluate• Develop Risk Treatment
Risk Assessment
• How to set the scene based on “Reinventing Project Management”
a book byAaron J. Shenhar & Dov Dvir
• How to run a Risk Assessment with a group of lower maturity
Reinventing Project ManagementThe Diamond Approach to Successful
Growth and Innovation
Aaron J. ShenharDov Dvir
The ‘Diamond Model’
• Identifies the Characteristics of the project and its deliverables based on
• 4 Dimensions- Technology- Novelty- Pace- Complexity
Technology
The Diamond Model
NoveltyComplexity
Pace
Low-tech
Medium-tech
High-tech
Super-high-tech
Regular
Fast/competitive
Time-critical
Blitz
Derivative Platform Breakthrough
AssemblySystemArray
Technology
The Diamond Model
NoveltyComplexity
Pace
Low-tech
Medium-tech
High-tech
Super-high-tech
Regular
Fast/competitive
Time-critical
Blitz
Derivative Platform Breakthrough
AssemblySystemArray
Technology
• Aim is to identify the “technology uncertainty”
• Impact on Design, Testing, required communication and number of design cycles needed
• Identifies the technical competence needed by Project Manager and Team
Technology• Low-tech projects are based and rely on
well – established technologies
• Medium-tech projects are based on existing technology but incorporate new technology
• High-tech projects are projects where most of the technology is new but do exist at project initiation
• Super-high-tech projects are based on new technologies that do NOT exist at project initiation and must be developed during the project
Technology
The Diamond Model
NoveltyComplexity
Pace
Low-tech
Medium-tech
High-tech
Super-high-tech
Regular
Fast/competitive
Time-critical
Blitz
Derivative Platform Breakthrough
AssemblySystemArray
Novelty
• Aim is to identify how new the product is going to be when its delivered to the “market” how hard it is to define the project goal
• Impact on how to manage the project and which approach is best
• Identifies reliability of market research, the time it takes to define requirements and specific marketing stages / training needed
Novelty
• Derivative products are improvements or extensions of existing ones
• Platform products are new generations of existing product lines
• Breakthrough products are new to the world products and transform a new concept or new idea into a new product
Technology
The Diamond Model
NoveltyComplexity
Pace
Low-tech
Medium-tech
High-tech
Super-high-tech
Regular
Fast/competitive
Time-critical
Blitz
Derivative Platform Breakthrough
AssemblySystemArray
Pace
• Aim is to identify how much time is availableand how urgent is it
• Impact on autonomy of project teams, the bureaucracy, the speed of design making and the intensity of top management involvement
Pace• Regular projects are non time critical ones and not critical to
immediate success
• Fast / competitive projects are driven by profit focused organizations, to create a strategic position or form a new business line
• Time – critical projects have a specific end date that they need to be completed by, driven by a window of opportunity. Missing the deadline is a project failure.
• Blitz projects are most urgent, most time critical. Mostly they are crisis projects and the crisis need to be solved immediately.
Technology
The Diamond Model
NoveltyComplexity
Pace
Low-tech
Medium-tech
High-tech
Super-high-tech
Regular
Fast/competitive
Time-critical
Blitz
Derivative Platform Breakthrough
AssemblySystemArray
Complexity
• Aim is to identify the various levels of complexity within the project
• Impact on project organization and the formality of project management
• Identifies … the complexity
Complexity
• Assembly projects may produce a simple stand – alone product based on a collection of elements. They may involve creating a new organization that is responsible for the product / function.
• System projects involve a complex collection of elements, that jointly perform multiple functions.
• Array projects deal with a large, widely spread collection of systems that need to function together to achieve a common purpose .
Technology
Example – World Trade Center
NoveltyComplexity
Pace
Low-tech
Medium-tech
High-tech
Super-high-tech
Regular
Fast/competitive
Time-critical
Blitz
Derivative Platform Breakthrough
AssemblySystemArray
World Trade Center
• 1964 decision to build the tallest building in the world and planning took 15 years and 8 years to build
• 7 buildings on 16 acres and >12mio feet2 office space• Biggest shopping mall, 7 level garage and public transp.• Build into bedrock going through the table of Hudson
River• 50.000 people had to be transported to their office
every day (100 elevators opening both sides)• Newly developed highly strength steel was used• Big economic and business consequences (1 day delay
would cause US$1mio additional cost)
… A U D I E N C E …
• How does the Diamondlook like? (next slide)
Technology
Example – World Trade Center
NoveltyComplexity
Pace
Low-tech
Medium-tech
High-tech
Super-high-tech
Regular
Fast/competitive
Time-critical
Blitz
Derivative Platform Breakthrough
AssemblySystemArray
Risk Assessment approach
• Set the scene• Establish the Context• Identify Risks• Analyse and Evaluate• Develop Risk Treatment
Areas in Company (example)
© Strategic Planning Group 2002
A practical method (option 1)
Financial Management
Funding Membership Fees Fund Raising
Fundingis late
FundingIs terminated
Area
Cash Flowissues
MajorProjects
RISKS•Not enough money to
meet our needs•Not enough money to
buy supplies•Program delays
OUTCOMES• Unable to supply some• of our services• Damage to our reputationif we can’t supply someservicesSecondary Outcomes• Financial • Social• Legal • Political
Sour
ces
CONTROLS IN PLACE• Budget done• Bank Overdraft• Competent Leaders• Financial Reports
A practical method (option 2)
Training Project
Delivery Admin & Mgmt Assessment
Course SupportMaterial & Design
Location &Delivery Mode
Proj
ect
RISKS•Failure to use
materials relevant toand supportive of thetraining package oraccredited course.
•Failure to employcompetent, qualifiedstaff to design, produceand evaluate supportmaterials.
OUTCOMES•Clients do not achieve
package competencies•RTO reputation damaged•Qualifications not
recognised•Trainees not employableSecondary Outcomes• Financial • Social• Legal • Political
Wor
kpac
kage
s
CONTROLS IN PLACE• Quality system to
ensure relevance• Library of related
materials foradaptation
• Policy for versioncontrols
• Qualified,competent staff
… A U D I E N C E …
• How do youfacilitate a Risk Assessment ?
• How do youaddress the challenges ?
Questions …
… A U D I E N C E …
• Relaxation …What is wrong in thenext picture?
1.Introduction
2.Why
3.Project Register
4.Risk Assessment
5.Effective Process
6.Risk Profile presentation
7.Project Health Check
Agenda
Risk Mgmt Standard (AS/NZS 4360)
Risk Process – What is it ?
Risk Management Process is the systematicapplication of management policies,
procedures and practices to the tasks ofidentifying, analysing, evaluating,
treating and monitoring risk.AS/NZS 4360 - Risk Management Standard
Risk Process – StandardPMBOK
Risk Process – Critical Success Factors
• Needs to be effective
• Needs to be understood
• Needs to be applicable
Challenge !
To squeezethis ….
intothis ….
Risk Process – option 1 (Banking)
Focus of Process• The Risk Management Process identifies and analyses Risks
and defines Mitigation Strategies to mitigate or eliminate Risks for the project.
Process Design• Everybody needs to be responsible to identify and
document Risks as well as mitigate Risks on his level.• Decisions how to treat risks are made by Project
Management under consultation with roles involved.• The PMO is managing the Risks overall.• A risk identifies a threat to reach the project goal and does
have a likelihood under 100% (otherwise ist treated as a Problem or Issue)
Risk Process – option 1 (Banking)
Prog
ram
m
Man
agem
ent
Stre
am L
ead
PMO
Tool
s/
Doc
umen
ts
Proj
ect M
gmt
RiskIdentification
RiskIdentification
RiskIdentification
RiskIdentification
RiskQualification
RiskQualification
RiskQualification
RiskQualification
Consolidation &QS Risks
ReviewRisks
ReviewRisks
ReviewRisks
DecisionMitigation
DecisionMitigation
DecisionMitigation
UpdateRisk Register 1
Risk Register Risk Register Risk Register Risk RegisterRisk Register
ongoing ongoing
until
Monday COB
Stream JF
Tues 15:00 - 16:30
Sream JF
Di 15:00 - 16:30
until
Monday COB
Risk Process – option 1 (Banking)
Prog
ram
m
Man
agem
ent
Stre
am L
ead
PMO
Tool
s/
Doc
umen
ts
Proj
ekt M
gmt
UpdateIssue Log
UpdateProject Plan
UpdateProject Plan
1
Issue Log Projekt Plan
Risk Management
Issue Management
Projekt Planning
Projekt Planning
until
Monday COB
Risk Process – option 1 (Banking)
Risk ID.
Risk-Title/ Risk-Description Teilprojekt Arbeitspaket
betroffenes Release/Iteration[Rel 0.1|Rel 1.1| Rel 1.1 It1|Rel 1.1 It2|Rel 1.1 It3|Rel 1.2 |Rel 1.2 It1|
alle Rel]
Risk-Cause Risk-Category Date of Risk-
Identification
ImpactCategory
1 Scope Creep TP Anforderungsmanangement Timeline Risk 12-Nov-082 Abstimmung mit betroffenen Bereichen in
time nicht möglich z.B. Finance, LegalTP Anforderungsmanangement Timeline Risk 12-Nov-08
3 Staffing Business und GTO (Verfügbarkeit der internen Ressourcen für Abstimmungen und Rückfragen)
TP Anforderungsmanangement Resource Risk 12-Nov-08
4 Fachliche Anforderungen technisch nicht umsetzbar (z.B. Flexibilisierung Online-Änderungsdienst)
TP Anforderungsmanangement Technology Risk 12-Nov-08
Prediction: Impact in
Project-Phase
Loss-occurrence / description of Consequences
Probability (%)
Rate of Conse-quences
Risk-Rate
PossibleRisk-Costsin T€
Risk Cost weighted against Budget
CurrentStatus
Last Modification of Current
Status
Remarks(If Risk is closed)
Name of Management-
Team Communicated
with
Communication-Date
Total
AverageZeitverzug 2 - Low NewZeitverzug 4 - High New
Zeitverzug 4 - High New
reduzierte Funktionalität 4 - High New
Risk Register – Maintained by PMO
Risk Process – option 1 (Banking)
• There is only one risk register with all risks of all streams• The risk register is managed centralized by the PMO• Every stream lead is held accountable to identify, qualify and
mitigate the risks on his level• The review and discussion of all risks is managed by project
management as part of the weekly jour fix• The ongoing risk process is ensured by the PMO• What happens if risk becomes an issue?
• Mail to PMO • Information to Project Mgmt by PMO• Update Issue Log by stream lead• Update risk register
Risk Process – option 1 (Banking)
• Pro’s• Embedded in Project Setup• Process as mature as the organization• Clear roles and responsibility
• Con’s• Process driven via and by the PMO
(depends on size of the project)
… A U D I E N C E …
• What kind ofprocesses have you seen ?
• Challenges ?
Questions …
1.Introduction
2.Why
3.Project Register
4.Risk Assessment
5.Effective Process
6.Risk Profile presentation
7.Project Health Check
Agenda
Risk Mgmt Standard (AS/NZS 4360)
Risk Profile PresentationKey Challenge
How to present the risk profileof your project
to various stakeholders
(eg. Team Members, Stream Leads, Programme Management, Steering Group, Project Sponsor, Senior Management, Clients, Vendors etc.)
Risk Profile Presentation ( option 1 )
Risk Register
Risk Profile Presentation ( option 1 )
Risk Register• Target Audience
• Project Team, Stream Leads, Project and Program Management, Abstract for Steering Group
• Pro’s• High Level of Detail• Good for Monitoring and Control
• Con’s• Too much detail for Senior Audiences
Risk Profile Presentation ( option 2 )
Likelihood vs. Consequence
Risk Profile Presentation ( option 2 )
Likelihood vs. Consequence• Target Audience
• Almost everybody around the project including Steering Group Members and Sponsors
• Pro’s• Key Data out of the register aggregated• Maintains itself• Based on Standard almost known to everybody
• Con’s• Could add ‘Before / After’ comparison
Risk Profile Presentation ( option 3 )
Risk Matrix
Risk Profile Presentation ( option 3 )
Risk Matrix• Target Audience
• Project Members incl. Steering Group
• Pro’s• Abstract out of Register• Same as Likelihood vs. Consequence
• Con’s• Level to low and a little bit unattractive to Senior
Management
Risk Profile Presentation ( option 4 )
Index vs. Timeline
Risk Profile Presentation ( option 4 )
Index vs. Timeline• Target Audience
• Everybody in the project plus senior Management
• Pro’s• Adds timeline to visibility• All selected risks visible on one slide
• Con’s• Could add size of risk (Dollars or severity)
as size of bubble
Risk Profile Presentation ( option 5 )
Heat Map
Risk Profile Presentation ( option 5 )
Heat Map• Target Audience
• Project and Senior Management
• Pro’s• Clearly shows and identifies areas of risk rather
than just a risk itself• Clearly shows and identifies projects with high risk
profile• Inherent and residual risk on one page
• Con’s• None, could be perceived to complex
Risk Profile Presentation ( option 6 )
Opportunity / Risk and Threat
Risk Profile Presentation ( option 6 )
Opportunity / Risk and Threat• Target Audience
• Project and Senior Management
• Pro’s• Summarizes Opportunities vs. Threats
• Con’s• No real message out of it
Risk Profile Presentation ( option 7 )
before / after
Risk Profile Presentation ( option 7 )
before / after• Target Audience
• Project and Senior Management
• Pro’s• Before / After view based
on likelihood / consequence
• Con’s• Size of bubble could show dollars before and after
mitigation
… A U D I E N C E …
• What type of optionshave you seen ?
Questions …
1.Introduction
05 min
2.Why
15 min
3.Project Register
30 min
4.Risk Assessment
30 min
5.Effective Process
30 min
6.Risk Profile presentation
30 min
7.Project Health Check
30 min
Agenda
Project Health Checks
How to proactively mitigatethe risk of project failure
Risk Mgmt Standard (AS/NZS 4360)
129
Project Health CheckAgenda
• Project Health Check as part of an effective Project Governance• Why check Project Health and the Benefits• Different Methods of Project Health Checks• The Quick Assessment
– Overview• The comprehensive Health Check
– Overview and Elements– The Questionnaire– The Assessment– The Results and the Comparison
• Practice Experience
130
Effective Governance Structure
Ready forProject Delivery
Ready forProject Planning
Ready forInitiation
Ready forProject Closure
ProjectClosed
Health Check &Post Imp Review
Gate /Checklist
Steering Group
HC / mini HC6 weeks afterPlanning Gate
HC / mini HCcalled byexception
Individual Cycle after Prio Gate, but not less then every 6 weeks
DepartmentalControl Groups 2 to 4 week cycle / routine depending on category of project
Starts with Planning and Ends with Project Final Delivery
QualityGates Milestone
Gate 1Ready forPilot
Ready forProduction
Post ImpReview
Post PostImp Review
PLANNINGINITIATION DELIVERY CLOSURE BENEFITSREALIZED
DEMAND
Status & GeneralReporting
Portf
olio
Mgm
tPr
ojec
t Man
agem
ent
Spec
ial F
uncti
ons
Facilitator
HC / mini HCcalled byexception
HC / mini HCcalled byexception
131
Why check on Project Health
• Comprehensive analysis of a project• Instant summary of the current situation• Identification of weaknesses and a generation of
package of measures• Identification of Best Practices used• Equal comparison of projects • Project Manager Competence development
based on several assessments• Management oversight project governance
132
Different Methods and Tools to conduct a Project Health Check
• Quick Assessment (self conducted)– Based on 15 key questions around risk, team, commercials, management and
scope– Could be done in 10 to 15 minutes
• Mini Health Check based on Knowledge Areas or Stages – For low risk profile and small projects– Approximately 40 questions– 1 hour– Moderation is optional
• Full Health Check based on Knowledge Areas or Stages (moderated)– For high risk profile and large projects– Approximately 150 questions– 3 – 4 hours– Moderation is mandatory
133
Quick AssessmentOverview
• 14 Questions in different areas, examples:– The Delivery Team output will match the requirements– The Business Case is still valid and understood– The Delivery Team understand what needs to be delivered and when– Project progress is monitored– Project monitoring is accurate– ….– ….
• Answers between 0 and 10– 0 – no confidence for that area– 10 – maximum confidence for that area
• Benefit– Simple to use– Quick overview of project– Below 70, immediate action
Result View
75%
134
Project Health CheckQuestionnaire and Assessment
• QuestionnaireIdentical questionnaire in all areas, adjusted to the relevant knowledge area and project management method used and the assessed stage(Invest, Initiation, Planning, Delivery, Closure)
• Assessment5 step rating : – 0 to 4 or “not relevant”– 0 if not available or not accomplished / implemented– 4 only if relevant result and deliverable is complete– traceable documented according to the requirements
Maximum can be reached– rated 4 in all areas would be a best practice– project with adoptable best practice approaches– that contribute to the Project Method and can be reused in other projects
135
Project Health CheckAreas to be checked
• Initiation, Investment, Business Case• Project Hand Over• Project Planning• Project Organisation• Work Packages• Staff Management• Communication Management• Project Start• Change Management• Quality Management• Project Management• Project Controlling• Project Closure• Business Satisfaction• Documents• Roles
Initiation
Planning
Delivery
Closure
General
136
Project Health Check Questionnaire Input Mask
137
Input Project Documents Steering Group
Presentations Former Health Check
Assessments and results
Former Action Logs, Tasks and Measures
Agenda Action Log from last Assessment Assessment Result Sign Off
Attendees Risk / Audit (lead / moderation) Project Manager Portfolio Manager of the relevant arm
Output Assessment Result Action Log Status Report to Stake
Holders
Supportive Docs
Cycle, Time, Duration, Location Recurrence – AdHoc / Exception / Check Points Time – to be defined Duration – 4 hours Location – to be defined
Project Health Check - The Assessment
Action Log Health Check Tool Result PDF
138
Project Health CheckResult View
0
0.5
1
1.5
2
2.5
3
3.5
4Initiation, Inv estment, Business Case
Project Hand Ov er
Project Planning
Project Organisation
Work Packages
Staff Management
Communication Management
Project Start
Change and Claim Management
Quality Management
Project Management
Project Controlling
Project Closure
Business Satisfaction
Documents
Roles
• All relevant areas according to Project Methodused within the specific Company are covered and assessed
BenchmarkResult
139
Project Health CheckComparison
0
0.5
1
1.5
2
2.5
3
3.5
4Initiation, Inv estment, Business Case
Project Hand Ov er
Project Planning
Project Organisation
Work Packages
Staff Management
Communication Management
Project Start
Change and Claim Management
Quality Management
Project Management
Project Controlling
Project Closure
Business Satisfaction
Documents
Roles
• Comparison of a certain project to– best practice– To other projects– To a former assessment of the same project
Result
140
Project Health Check Practice Experience
• Identifies risks before they become issues• Structured view on project situation in sense of processes
and methodologies used as well as roles and documents facilitated
• Catalyst to facilitate communication and clarification of open points within the project management team
• Fixation of measures and tasks that implicit have been scheduled but got never executed because of the daily business
• Might cause some awkward but important strategic measures(e.g.: involvement of top management)
• Biggest advantage achieved by repeating assessments(first assessment after signing the Project Request)
Questions …
1.Introduction
2.Why
3.Project Register
4.Risk Assessment
5.Effective Process
6.Risk Profile presentation
7.Project Health Check
Agenda
A – C – T
• A – Actively stay involved and keep informed
• C – I will call you
• T – Template as additional softcopy
T H A N KY O U
www.torstenkoerting.com – [email protected]
Contact Information
• Name: Torsten J. Koertingwww.torstenkoerting.com
• Email: [email protected]
• Phone: Australia +61 (0) 4 8848 0801Germany +49 (0) 173 3082185
• Session Number #
Picture Credits ( 1 / 1 )agenda 1 - http://www.flickr.com/photos/24293932@N00/WTC - http://www.flickr.com/photos/kidneynotes/question - http://www.flickr.com/photos/eleaf/Aaron Shenhar - http://howe.stevens.edu/fileadmin/Files/people/photos/Aaron-Shenhar-new.jpgDov Dvir - http://web.bgu.ac.il/NR/rdonlyres/C4956661-14AD-438E-95B7-EC1C18E30A87/0/DvirDov.JPGbreak - http://www.flickr.com/photos/dullhunk/Audience - http://www.flickr.com/photos/oreilly/