What is Risk Management?What is Risk Management?

Who uses Risk Management?Who uses Risk Management?

CAUSE FACTORS CAUSE FACTORS

Risk management plan Risk management plan

Risk management strategy Risk management strategy

Risk Management - the process of identifying and controlling hazards to protect the force. It’s five steps represent a logical

thought process from which users develop tools, techniques, and procedures for applying risk management in their areas of responsibility.

It is a closed-loop process applicable to any situation and environment.

Key Definitions

TSP-5

NextNext

The basic process steps are:

Establish the contextEstablish the context

Identify the risksIdentify the risks

Analyse the risksAnalyse the risks

Evaluate the risksEvaluate the risks

Treat the risksTreat the risks

Hazard - any real or potential condition that can cause injury, illness or death of personnel, or damage to, or loss of equipment or property, or mission degradation.

Risk - chance of hazard or bad consequences; exposure to chance of injury or loss.

Key Definitions

TSP-6

Risk level is expressed in terms of hazard probability and severity. Probability - the likelihood that an

event will occur. Severity - the expected consequence

of an event in terms of degree of injury, property damage, or other mission impairing factors (loss of combat power, etc..,) that could occur.

Key Definitions

TSP-7

CAUSE FACTORS

•Human Error - an individual’s actions or performance is different than what is required and results in or contributes to an accident.

•Material Failure/Malfunction - a fault in the equipment that keeps it from working as designed, therefore causing or contributing to an accident.

•Environmental Conditions - any natural or manmade surroundings that negatively affect performance of individuals, equipment or materials and causes or contributes to an accident.

CAUSES: •HUMAN ERROR

•MATERIAL FAILURE/MALFUNCTION

•ENVIRONMENTAL CONDITIONS

UNDERLYING SOURCES OF CAUSES •INDIVIDUAL FAILURE

•LEADER FAILURE

•TRAINING FAILURE

•STANDARDS FAILURE

•SUPPORT FAILURE

Brain StormingExpertsPublicationsAccident

InformationScenario Thinking

Detection Resources and

Techniques

TSP-14

Risk Management practices are widely used in public and the private sectors, covering a wide range of activities or operations.

These include:

Who uses Risk Management?

• Finance and Investment

• Insurance

• Health Care

• Public Institutions

• Government

s

Identifying and documenting events that pose a risk to the outcome of a project isjust the first step. It is equally important to monitor all risks on a scheduled basisby a risk management team, and reported on in the project status report.

Risk management plan

• Risk Identification• Risk Assessment• Risk Mitigation• Risk Contingency Planning• Risk Tracking and Reporting

This plan documents the processes, tools and procedures that will be used tomanage and control those events that could have a negative impact on the project. It’s the controlling document formanaging and controlling all project risks.

This plan will address:

Purpose of the plan (risk management plan )

The responsibility for managing risk is shared amongst all the stakeholders of the project.

Risk Identification All project stakeholdersRisk Registry Project ManagerRisk Assessment All project stakeholdersRisk Statements Project Manager(s)Risk Response Options Identification All project stakeholdersRisk Contingency Planning Project Manager(s)Risk Response Management Project ManagersRisk Reporting Project Manager

Risk Responsibilities

Risk Assessment

Risk assessment is the act of determining the probability that a risk will occur and theimpact that event would have, should it occur. This is basically a “cause and effect”analysis. The “cause” is the event that might occur, while the “effect” is the potentialimpact to a project, should the event occur.

Assessment of a risk involves two factors. First is the probability which is the measure of certainty that an event, or risk, will occur.

The second factor is estimate of the impact on the project. This can be a somewhat subjective assessment, but should be quantified whenever possible.

Risk Response

For each identified risk, a response must be identified.

best possible assessment of the risk and description of the response options in order to select the right response for each risk. The probability of the risk event occurring and the impacts will be the basis for determining the degree to which the actions to mitigate the risk should be taken.

Risk Mitigation

Risk mitigation involves two steps:• Identifying the various activities, or steps, to reduce the probability and/orimpact of an adverse risk.• Creation of a Contingency Plan to deal with the risk should it occur.Taking early steps to reduce the probability of an adverse risk occurring may be moreeffective and less costly than repairing the damage after a risk has occurred

Risk Contingency Planning

Contingency planning is the act of preparing a plan, or a series of activities, should anadverse risk occur. Having a contingency plan in place forces the project team to think in advance as to a course of action if a risk event takes place.

• Identify the contingency plan tasks (or steps) that can be performed toimplement the mitigation strategy.• Identify the necessary resources such as money, equipment and labor.• Develop a contingency plan schedule. Since the date the plan will beimplemented is unknown, this schedule will be in the format of day 1, day 2,day 3, etc., rather than containing specific start and end dates.• Define emergency notification and escalation procedures, if appropriate.• Develop contingency plan training materials, if appropriate.• Review and update contingency plans if necessary.• Publish the plan(s) and distribute the plan(s) to management and those directlyinvolved in executing the plan(s).

The project risk manager will document the risk factor and the mitigating strategy. these documents can be used for the future project .

Tracking and Reporting