David Hillson, The Risk Doctor, explains how to structure your risk process by asking (and answering) six simple questions.
People say to me what's risk-management really all about surely it's a lot to do with probability and statistics and a complex process that's very difficult to apply and I disagree I think managing risk is one of the most natural things we can do and one of the most important and for me risk management is essentially asking and answering six basic questions and they're questions that everybody wants to ask no matter what situation they're in whether it's a personal dilemma a project process or some kind of organizational decision the first question is what are we trying to do and that really leads us into the first step of a risk process which is objective setting understanding the scope and the context and the the environment within which we're having to manage risk so what am I trying to achieve is the first question and it's the first step of the risk process once we know what we're trying to achieve the second question is what might affect me are there things out there in the future which could either hinder me achieving my goals or maybe even help me and that question what might affect me is our step into risk identification finding the uncertainties that matter the future events which if they occurred would help or hinder as we try to achieve our goals the third question is that not all of those things we've identified are equally important so my third question is which of those things that might affect me are most important and that leads us to the step of the risk process that we call risk assessment risk evaluation or risk analysis try to prioritize those things that might affect us in two key dimensions how likely is it to happen and if it did happen what could it what effect could it have on our goals either positive or negative because of course threatening risk includes both threats and opportunities so our first three questions are what am I trying to achieve what might affect me and which are the most important ones that gives me a prioritized list of uncertainties that matter now the fourth question what should we do about it and this is really important because otherwise we're just the victims of uncertainty and things might happen on our projects which we weren't expecting so now we know what the key risks are we can deduct design some responses we could try on bad risks to avoid them or minimize them or protect ourselves for good risks we could try to maximize or exploit them or to make ourselves more able position ourselves to be better able to exploit them to use them if they happen so our fourth question what am I trying to achieve what might affect me which are the important ones and what shall I do then of course we have to do what we said we do and our fifth question is did it work often we find that the actions that we plan to take in to in response to risk are not actually achieving what we did want and so we might need to modify our approach and the last question which is really important question six what changed projects life business is constantly changing very dynamic and we need to make sure that we spot the new risks that have arisen since the last time we looked since the last time that we took action now I think those six questions are easy they're intuitive they're the sorts of questions that anybody would ask in any important situation what am I trying to achieve what might affect me which are the important ones what can I do about it once I've done that did it work and what's changed and if we build our risk process around those six simple questions then it becomes easy to do it becomes intuitive it becomes a natural process that doesn't involve lots of bureaucracy lots of forms lots of statistics we're just asking and answering important questions of course on a bigger project we might want to apply those six questions at a more detailed level with templates and tools and modeling and all sorts of other approaches but as at its root whether we're trying to put a man on the moon or we're trying to move from one side of the office to the other a complex project or a simple project the same six questions apply so next time you're tempted to think that risk management is really difficult just remember the six questions ask them answer them and manage your risk
Post a Comment