IVI Framework Viewer

Programme Risk Management

C4

Analyse and aggregate programme component risks, and review programme associated risks to understand and manage the programme's risk profile.

Improvement Planning

Practices-Outcomes-Metrics (POM)

Representative POMs are described for Programme Risk Management at each level of maturity.

1Initial
  • Practice
    Rely on the best endeavours of staff.
    Outcome
    An immediate basic capability is turned on.
    Metric
    Number of experienced staff.
  • Practice
    Leverage professional associations and networking to identify working approaches known to be effective.
    Outcome
    The implementation of working approaches that are known to be effective is very fast.
    Metric
    Number of approaches, methods, tools, or processes adapted from outside to get up and running.
2Basic
  • Practice
    Develop processes to identify programme risks associated with programme components.
    Outcome
    Project risks are identified.
    Metric
    Number of programme risks identified through component risk assessments.
  • Practice
    Develop processes and procedures to manage identified programme risks.
    Outcome
    The management of programme risk improves.
    Metric
    Number of IT risk categories addressed in processes and procedures.
3Intermediate
  • Practice
    Ensure both positive and negative risks are identified and managed.
    Outcome
    Risk management addresses the minimization of potentially negative risks and the maximization of potentially positive risks.
    Metric
    Number of both positive and negative risks being managed.
  • Practice
    Communicate and promote the use of programme risk management-related processes.
    Outcome
    Stakeholder assistance in identifying and managing programme risk is enhanced.
    Metrics
    • Number and frequency of risk management communications.
    • Stakeholder surveys to check satisfaction.
4Advanced
  • Practice
    Analyse risks as potentially emerging from multiple sources and as having multiple (differing) impacts on programme components.
    Outcomes
    • Programme risk management is more comprehensive and effective.
    • One is less likely to hear… ‘I didn't see that one coming’.
    Metrics
    • Number of risks identified as having multiple potential sources.
    • Number of risks with potentially multiple impacts on the project portfolio.
  • Practice
    Leverage and enhance the project management information system (PMIS) to support ongoing improvements.
    Outcome
    Many risks are cyclical (e.g. flooding, storms, etc.) and learning from the past enhances risk management approaches.
    Metric
    Number of cyclical risks identified.
5Optimized
  • Practice
    Analyse the likely impact of risk and potential risk events from the perspectives of multiple stakeholders.
    Outcomes
    • Some risk events can be beneficial to some stakeholders while negatively impacting others.
    • The rationale for decisions needs to be communicated sensitively.
    Metric
    Number of stakeholder perspective risk management views available.
  • Practice
    Execute a programme of continuous improvement around programme risk management that leverages best-known industry practice, research findings, and the advice of programme management tools vendors.
    Outcome
    Programme risk management uses best-known industry practices.
    Metric
    Number of programme risk management innovations.