7 Ways to Identify Risks

Successful project managers have a common trait – they identify and manage risks. Let's look at seven tools and techniques to identify project risks.

Often project managers start with a splash. They get the team together, identify lots of risks, and enter them into an Excel spreadsheet. However, the risks are never discussed again.

What happens when project managers and their team fail to identify risks in an iterative fashion? Teams spend their time and energy on things that do not matter. Risks are not identified and turn into more costly issues. Furthermore, project teams are not aware of emerging killer risks.

When to Identify Risks

The risk exposure is greatest at the beginning of projects. The uncertainty is high because there is less information in the beginning of projects. Wise project managers start identifying risks early in their projects. Additionally, capture these risks in your project charter.

Want to know how to improve your risk identification? Identify risks:

  • Early in the project
  • In an iterative manner
  • On a consistent frequency such as weekly
  • When change control is performed
  • When major milestones are reached

More...

7 Ways to Identify Project Risks

There are numerous ways to identify risks. Project managers may want to use a combination of these techniques. For example, the project team may review a checklist in one of their weekly meetings and review assumptions in a subsequent meeting. Here are seven of my favorite risk identification techniques:

  1. Interviews. Select key stakeholders. Plan the interviews. Define specific questions. Document the results of the interview.
  2. Brainstorming. I will not go through the rules of brainstorming here. However, I would offer this suggestion. Plan your brainstorming questions in advance. Here are questions I like to use:
    • Project objectives. What are the most significant risks related to [project objective where the objective may be schedule, budget, quality, or scope]?
    • Project tasks. What are the most significant risks related to [tasks such as requirements, coding, testing, training, implementation]?
  3. Checklists. See if your company has a list of the most common risks. If not, you may want to create such a list. After each project, conduct a post review where you capture the most significant risks. This list may be used for subsequent projects. Warning – checklists are great, but no checklist contains all the risks.
  4. Assumption Analysis. The Project Management Body of Knowledge (PMBOK) defines an assumption as “factors that are considered to be true, real, or certain without proof or demonstration.” Assumptions are sources of risks. Project managers should ask stakeholders, “What assumptions do you have concerning this project?” Furthermore, document these assumptions and associated risks.
  5. Cause and Effect Diagrams. Cause and Effect diagrams are powerful. Project managers can use this simple method to help identify causes--facts that give rise to risks. And if we address the causes, we can reduce or eliminate the risks.
  6. Nominal Group Technique (NGT). Many project managers are not familiar with the NGT technique. It is brainstorming on steroids. Input is collected and prioritized. The output of NGT is a prioritized list of risks.
  7. Affinity Diagram. This technique is a fun, creative, and beneficial exercise. Participants are asked to brainstorm risks. I ask participants to write each risk on a sticky note. Then participants sort the risks into groups or categories. Lastly, each group is given a title.

Variety is the spice of life. One sure way to have an unengaged team is to use the same risk identification technique repeatedly. Additionally, mixing it up occasionally will help your team think in new ways and improve the identification process.

Write Clear Risk Statements

As you identify risks, you will need to write and capture risk statements in your risk register. One simple and powerful way to do this is to use the If-Then Risk Statements. The metalanguage is: If [Event], Then [Consequences]. For example: If the electrical system is not installed per the specifications, then there may be additional cost and an adverse impact to the schedule.

“They that are on their guard and appear ready to receive their adversaries are in much less danger of being attacked than the supine, secure and negligent.” -

—Benjamin Franklin, Scientist, Publisher, and Diplomat

7 Risk Identification Mistakes

Think about it. Ninety percent of all risks can be eliminated or greatly reduced through basic risk management.

Take note of these risk identification mistakes:

  1. The failure to recognize risks early when it is less expensive to address.
  2. Not identifying risks in an iterative fashion.
  3. Risks are not identified with appropriate stakeholders.
  4. Not using a combination of risk identification techniques.
  5. Risks are not captured in one location.
  6. The failure to make the risks visible and easily accessible.
  7. Risks are not captured in a consistent format (e.g., Cause -> Risk -> Impact).

Consider reviewing this blog post and refine the risk identification strategy for your current or upcoming projects. Additionally, capture the approach in your Risk Management Plan. Once you've identified your project risks, you are ready to evaluate your risks.

Hey, if you wish to boost your project risk management knowledge and skills further, check out The PMI-RMP® for Project Managers.

Harry Hall, PMP, PMI-RMP

Harry Hall, the Project Risk Coach, is a speaker, teacher, author, and blogger. He has implemented enterprise and IT PMOs and enterprise risk management (ERM) programs in the financial, healthcare, and agricultural industries. One of Harry's greatest joys is teaching, helping project managers pass their Project Management Professional (PMP®) and Risk Management Professional (PMI-RMP®) exams. 

7 Ways to Identify Project Risks

7 ways to identify risks.blog %283%29

Risk Identification Checklist. Ninety percent of all project risks can be greatly reduced by simply identifying the risks. Grab this checklist and start identifying your project risks.

Bonus: I will send you a sequence of emails where I describe each of the seven risk identification techniques in detail.

You will also receive my weekly blog updates.

We won't send you spam. Unsubscribe at any time. Powered by ConvertKit