Programme Risk Management
Analyse and aggregate programme component risks, and review programme associated risks to understand and manage the programme's risk profile.
Improvement Planning
Practices-Outcomes-Metrics (POM)
Representative POMs are described for Programme Risk Management at each level of maturity.
- 1Initial
- Practice
- Rely on the best endeavours of staff.
- Outcome
- An immediate basic capability is turned on.
- Metric
- Number of experienced staff.
- Practice
- Leverage professional associations and networking to identify working approaches known to be effective.
- Outcome
- The implementation of working approaches that are known to be effective is very fast.
- Metric
- Number of approaches, methods, tools, or processes adapted from outside to get up and running.
- 2Basic
- Practice
- Develop processes to identify programme risks associated with programme components.
- Outcome
- Project risks are identified.
- Metric
- Number of programme risks identified through component risk assessments.
- Practice
- Develop processes and procedures to manage identified programme risks.
- Outcome
- The management of programme risk improves.
- Metric
- Number of IT risk categories addressed in processes and procedures.
- 3Intermediate
- Practice
- Ensure both positive and negative risks are identified and managed.
- Outcome
- Risk management addresses the minimization of potentially negative risks and the maximization of potentially positive risks.
- Metric
- Number of both positive and negative risks being managed.
- Practice
- Communicate and promote the use of programme risk management-related processes.
- Outcome
- Stakeholder assistance in identifying and managing programme risk is enhanced.
- Metrics
- Number and frequency of risk management communications.
- Stakeholder surveys to check satisfaction.
- 4Advanced
- Practice
- Analyse risks as potentially emerging from multiple sources and as having multiple (differing) impacts on programme components.
- Outcomes
- Programme risk management is more comprehensive and effective.
- One is less likely to hear… ‘I didn't see that one coming’.
- Metrics
- Number of risks identified as having multiple potential sources.
- Number of risks with potentially multiple impacts on the project portfolio.
- Practice
- Leverage and enhance the project management information system (PMIS) to support ongoing improvements.
- Outcome
- Many risks are cyclical (e.g. flooding, storms, etc.) and learning from the past enhances risk management approaches.
- Metric
- Number of cyclical risks identified.
- 5Optimized
- Practice
- Analyse the likely impact of risk and potential risk events from the perspectives of multiple stakeholders.
- Outcomes
- Some risk events can be beneficial to some stakeholders while negatively impacting others.
- The rationale for decisions needs to be communicated sensitively.
- Metric
- Number of stakeholder perspective risk management views available.
- Practice
- Execute a programme of continuous improvement around programme risk management that leverages best-known industry practice, research findings, and the advice of programme management tools vendors.
- Outcome
- Programme risk management uses best-known industry practices.
- Metric
- Number of programme risk management innovations.