Paperless
Efficient QMS™
Created by: qualitycontrolplan.com

Home | Learn more about eQMS or call for information: 719-649-4242
Hold your smartphone in landscape mode for best view | Cookies required to operate eQMS
Dag nabbit Norton, stop reporting false positives - we've been online 20 years! Consider whitelisting our web address to evaluate eQMS. In your Norton, go to Security - Advanced Security - Safe Web - Exclusions, then add our web address to evaluate eQMS.
Log In

Risk Mitigation and Planning Procedure

Table of Contents - Click here for PDF demo - opens in new tab

1.0 Purpose
2.0 Objective of Risk Mitigation and Planning
3.0 Risk Response Options
4.0 Risk Planning
4.1 Risk Planning Documentation
4.2 Red Flag Item Lists
4.3 Risk Charters
5.0 Formal Risk Management Plan
6.0 Risk Identification Process
6.1 Risk Identification Tools and Techniques
6.2 Risk Allocation
Appendix A - Risk Identification Checklists - Red-Flag List
Appendix B - Risk Charter
Appendix C - Risk Register
Appendix D - Design-Build Risk Allocation Matrix
Appendix E - Critical Elements Risk Assessment

1.0 Purpose
The risk mitigation and planning process uses information from risk identification, assessment and analysis to formulate response strategies for key risks. Common strategies are avoidance, transference and/or mitigation acceptance. The mitigation and planning exercises must be documented in an organized and comprehensive fashion that clearly assigns responsibilities and delineates procedures for mitigation and allocation of risks. Common documentation procedures frequently include the creation of red flag item lists, risk charters and formal risk management planning documentation. Risk mitigation and planning efforts may necessitate that Suppliers set policies, procedures, goals and responsibility standards. Formalizing risk mitigation and planning throughout the Company will help establish a risk culture that should result in better cost management from planning through production and better allocation of project risks that align teams with Customer-oriented performance goals.

2.0 Objectives of Risk Mitigation and Planning
The objectives of risk mitigation and planning are...

... Three key questions can be posed for risk mitigation:

  1. ...
  2. ...
  3. ...

An understanding of these three questions is critical to risk mitigation and risk management planning. Question 1 addresses...

3.0 Risk Response Options
Risk identification, assessment and analysis exercises form the basis for sound risk response options. A series of risk response actions can help to avoid or mitigate the identified risks. A response may be the following:

  • ...
  • ...
  • ...
  • ...
  • ...
  • ...

The above categorization of risk response options... The strategies and actions include the following:

Acceptance:...

Avoidance:...

Mitigation:...

Transference:...

Given a clear understanding of the risks, their magnitude and the options for response, an understanding of project risk will emerge. This understanding will include...

4.0 Risk Planning
Risk planning involves the thoughtful development, implementation and monitoring of appropriate risk response strategies. Risk planning is the detailed formulation of a plan of action for the management of risk:

  • ...
  • ...

Risk planning is iterative and includes...

Planning begins by...

4.1 Risk Planning Documentation
Each risk plan should be documented but the level of detail will vary with the unique attributes of each project. Large projects or projects with high levels of uncertainty...

4.2 Red Flag Item Lists
A red flag item list is created at the...

A red flag item list is...

See a sample list of risks in Appendix A. While this sample list can be used to create a list of red flag items for a project, it is...

4.3 Risk Charters
The creation of a risk charter is a more formal identification of risks than the listing of red flag items. Typically, it is...

A risk charter is...

A risk charter is...

A risk charter... The risk charter may include relevant information, such as the following:

  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...

Two examples of risk charters are in Appendix B and Appendix C. The first example is a spreadsheet that forms the basis of the risk management plan. The spreadsheet contains columns for identification, analysis, response strategy, monitoring and control. The second example uses the term risk register synonymously with risk charter. The risk register contains more quantitative risk assessment information than the spreadsheet example but the goal of the documentation is similar. The risk register adds issues such as correlation among dependent components, type of distribution used to model the risk and expected value of the risks.

5.0 Formal Risk Management Plan
The strategy to manage risk provides the project team with direction and basis for planning. The risk management plan should...

The six primary steps in project risk management are the following:

  1. ...
  2. ...
  3. ...
  4. ...
  5. ...
  6. ...

The plan is the road map that tells the Company how... The following is a sample risk management plan outline:

  1. ...
  2. ...
  3. ...
  4. ...
  5. ...
  6. ...
  7. ...
  8. ...
  9. ...
  10. ...
  11. ...

Each risk plan should be documented but the level of detail will vary with the unique attributes of each project. Red flag item lists, risk charters and formal risk management plans provide flexibility in risk management documentation.

6.0 Risk Identification Process
The risk identification process begins with...

Typical Risk Identification Checklist:

  • ...
  • ...
  • ...
  • ...
  • ...
  • ...

The team should examine and identify project events by...

After the risks are identified, they should be... The following table provides a typical list of classifications with alternate identified risks.

CLASSIFICATION OF IDENTIFIED RISKS

...

A number of documents and tools are available to support the risk identification process. The following table provides an example of project-specific documents, program documents and techniques available for risk identification.

...

6.1 Risk Identification Tools and Techniques
Project risk can be identified multiple ways...

Risks and opportunities that affect products and services (operational processes) can be determined using tools such as...

RISK IDENTIFICATION TOOLS AND TECHNIQUES

...

The key to success with any risk identification tool or technique is...

The risk identification process identifies and categorizes risks that could affect the project. It documents these risks and, at a minimum, ...

6.2 Risk Allocation
The rigorous process of risk identification, assessment, analysis and mitigation allows for...

In theory, best value is achieved by...

The Company is more likely to accept risks...

The purchase order is...

Best practice:

The goal of an optimal allocation of risk is...

The rigorous process of risk identification, assessment, analysis and mitigation allows for a more transparent and informed understanding of project risk. When risks are understood and their consequences are measured, decisions can be made to allocate risks in a manner that...

The objectives of risk allocation can vary depending on unique project goals but four fundamental tenets of sound risk allocation should always be followed:

  • ...
  • ...
  • ...
  • ...

6.2.1 Allocate Risks to Party Best Able to Manage Them

A fundamental tenet of risk management is...

Following this principle...

6.2.2 Risk Allocation in Alignment with Project Objectives

Risks should be allocated in a manner that...

Allocating risks in alignment with project objectives begins with...

The importance of clearly understanding and defining project objectives cannot be overemphasized. Project objectives...

6.2.3 Risk Sharing

The concepts of risk sharing and risk allocation are often used synonymously. Risk allocation is defined as...

Communication among parties is a key to any sharing of risk allocation. Risk-sharing provisions should...

6.2.4 Risk Allocation in Alignment with Customer-Oriented Performance Goals

The ultimate goal of risk allocation should...

END

6.2.5 Risk Allocation Matrix

Perhaps the most widely used tool for risk allocation is...

Example of risk allocation for outsourced processes:

...

Allocation matrices are a fundamental tool in the development of design-produce contracts. Appendix D provides an example design-produce risk allocation matrix. It provides a detailed framework to make risk allocation decisions for each design-produce project. The matrix is also...

6.2.6 Innovative Contracting Tools and Techniques

The purchase order is...

The following table provides a list of innovative project delivery, procurement and contracting methods that can be used for risk allocation. ...

Innovative contracting approaches for risk allocation:

...

6.2.7 Contingency Considerations

Any party assuming a risk must be prepared...

When a Company requires a Supplier to assume a risk in a contract, that Supplier must...

Appendix A - Risk Identification Checklists - Red-Flag List

1. Project Management Risk Document Checklist

Risk management reports vary depending on the size, nature and phase of the project. The following are examples of risk management documents and reports that may be useful:

  • ...
  • ...
  • ...
  • ...
  • ...
  • ...

2. Sample Red Flag Item List (reduce your list as required)

Technical Risks

  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...

External Risks

  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...

Environmental Risks

  • ...
  • ...
  • ...
  • ...
  • ...

Organizational Risks

  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...

3. Miscellaneous Checklist

  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...

4. Common Risks

  • ...
  • ...

Environmental

  • ...
  • ...

Other Risks

  • ...

Appendix B - Risk Charter

Project Risk Charter Management Plan (Example)

...

See legend below...

Chart of the risk assessment process.

...:

  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...
  • ...

Low risks...

Moderate risks...

High risks...

Appendix C - Risk Register

Project Risk Register Management Plan (Example)

...

Appendix D - Design-Produce Risk Allocation Matrix

...

Appendix E - Critical Elements Risk Assessment

...

REVISION HISTORY AND APPROVAL RECORD

Quality System Procedure
RISK MITIGATION AND PLANNING PROCEDURE
Rev: Orig (EO #??)

Copyright © JnF Specialties, LLC. All rights reserved worldwide.

PROPRIETARY INFORMATION - UNCONTROLLED IF PRINTED UNLESS OTHERWISE MARKED