The same approach to risk is often taken for these very different situations:
- It is obvious that we would misspend the time required for any further risk assessment because the sponsor owns all the risk.
- There may be some risk to doing this project that may affect multiple business stakeholders.
- There is definitely risk involved in this project that will likely affect much or most of the enterprise.
Our Advice
Critical Insight
- Something is better than nothing. Avoid the all-or-nothing mindset – it’s not PMBOK or bust. Even modest investments in risk will provide a return.
- Don’t re-invent the wheel. Learn from and record current and historical risk events so lessons learned can easily be embedded into future projects.
- Get a curator. Assign someone to own the risk topic and make it their job to keep a relevant menu of risks.
Impact and Result
- Since all projects are not created equal from a risk perspective, create a standard process during intake or initiation to triage the appropriate rigor of the risk approach.
- There will be a lot of overlap between projects, so why reinvent the wheel? Build a structured menu of potential risk events to consider early in the project and maintain that menu over time so it remains relevant. Provide easy access to the menu through a tool or template for all project managers to use during the project planning phase.
- Right-size the total approach. There’s a tendency in the IT culture to either do things by the book or not do them at all. It’s not all or nothing. Even small investments in project risk planning can play dividends by avoiding disasters.