IVI Framework Viewer

Project Portfolio Risk Management

C2

Analyse and review risks associated with project portfolio components in order to arrive at an understanding of the portfolio's total risk profile.

Improvement Planning

Practices-Outcomes-Metrics (POM)

Representative POMs are described for Project Portfolio Risk Management at each level of maturity.

1Initial
  • Practice
    Rely on staff expertise.
    Outcome
    Major risks are identified and discussed.
    Metric
    Number of staff with IT risk management experience
  • Practice
    Leverage professional networks and emulate successes.
    Outcome
    Working approaches that are known to be effective for risk management can be deployed quickly.
    Metric
    Number of approaches adapted from outside the organization for IT risk management.
2Basic
  • Practice
    Develop processes to identify portfolio risks associated with project portfolio components.
    Outcome
    The risks to the portfolio introduced by project portfolio components are identified.
    Metric
    Number of project portfolio risks identified by component risk assessments.
  • Practice
    Develop processes and procedures to manage identified portfolio risks.
    Outcome
    The management of portfolio risk improves.
    Metric
    Number of IT risk categories addressed in processes and procedures.
3Intermediate
  • Practice
    Ensure both positive and negative risks are identified and managed.
    Outcome
    Risk management seeks to minimize potentially negative risks and to maximize potentially positive risks.
    Metric
    Number of both positive and negative risks being managed.
  • Practice
    Communicate and promote the use of portfolio risk management-related processes.
    Outcome
    Stakeholder assistance in identifying and managing portfolio risk is enhanced.
    Metrics
    • Number and frequency of risk management communications.
    • Stakeholder surveys to check satisfaction.
4Advanced
  • Practice
    Analyse risks as potentially emerging from multiple sources and as having multiple (differing) impacts on portfolio components.
    Outcomes
    • Project portfolio risk management is more comprehensive and effective.
    • One is less likely to hear… ‘I didn't see that one coming’.
    Metrics
    • Number of risks identified as having multiple potential sources.
    • Number of risks with potentially multiple impacts on the project portfolio.
  • Practice
    Leverage and enhance the project management information system (PMIS) to support ongoing improvements.
    Outcome
    Many risks are cyclical (e.g. flooding, storms, etc.) and learning from the past enhances risk management approaches.
    Metric
    Number of cyclical risks identified.
5Optimized
  • Practice
    Analyse the likely impact of risk and potential risk events from the perspectives of multiple stakeholders.
    Outcomes
    • Some risk events can be beneficial to some stakeholders while negatively impacting others.
    • The rationale for decisions needs to be communicated sensitively.
    Metric
    Number of stakeholder perspective risk management views available.
  • Practice
    Use research outputs and lessons learned to maintain a competitive risk management approach.
    Outcome
    Risk management approaches are comparable with good industry practice and provide confidence.
    Metric
    Number of research-informed risk management innovations.