RSKM.SP 1.3 Establish a Risk Management Strategy

A comprehensive risk management strategy addresses items such as the following:

• the scope of the risk management effort
• Methods and tools to be used for risk identification, risk analysis, risk mitigation, risk monitoring, and communication
• Work-specific sources of risks
• How risks are to be organized, categorized, compared, and consolidated
• Parameters used for taking action on identified risks, including likelihood, consequence, and thresholds
• Risk mitigation techniques to be used, such as prototyping, piloting, simulation, alternative designs, or evolutionary development
• The definition of risk measures used to monitor the status of risks
• Time intervals for risk monitoring or reassessment

The risk management strategy should be guided by a common vision of success that describes desired future work outcomes in terms of the product delivered, its cost, and its fitness for the task. The risk management strategy is often documented in a risk management plan for the organization or work group. This strategy is reviewed with relevant stakeholders to promote commitment and understanding.

A risk management strategy should be developed early in the work lifecycle, so that relevant risks are identified and managed proactively. Early identification and assessment of critical risks allows the work group to formulate risk handling approaches and adjust work definition and allocation of resources based on critical risks.

Example Work Products

1. Risk management strategy