请输入您要查询的百科知识:

 

词条 Risk management plan
释义

  1. Risk response

  2. Examples

  3. See also

  4. References

  5. External links

{{refimprove|date=November 2007}}

A 'risk management plan or plan risk management is a document that a project manager prepares to foresee risks, estimate impacts, and define responses to risks. It also contains a risk assessment matrix.

A risk is "an uncertain event or condition that, if it occurs, has a positive or negative effect on a project's objectives."[1] Risk is inherent with any project, and project managers should assess risks continually and develop plans to address them. The risk management plan contains an analysis of likely risks with both high and low impact, as well as mitigation strategies to help the project avoid being derailed should common problems arise. Risk management plans should be periodically reviewed by the project team to avoid having the analysis become stale and not reflective of actual potential project risks.

Most critically, risk management plans include a risk strategy.

Risk response

{{main |Risk management#Potential risk treatments}}

Broadly, there are four potential responses to risk with numerous variations on the specific terms used to name these response options:[2][3]

  • Avoid – Change plans to circumvent the problem;
  • Control / mitigate / modify / reduce – Reduce threat impact or likelihood (or both) through intermediate steps;
  • Accept / retain – Assume the chance of the negative impact (or auto-insurance), eventually budget the cost (e.g. via a contingency budget line); or
  • Transfer / share – Outsource risk (or a portion of the risk) to a third party or parties that can manage the outcome. This is done financially through insurance contracts or hedging transactions, or operationally through outsourcing an activity.

(Mnemonic: SARA, for Share Avoid Reduce Accept, or A-CAT, for "Avoid, Control, Accept, or Transfer")

Risk management plans often include matrices.

Examples

The United States Department of Defense, as part of acquisition, uses risk management planning that may have a Risk Management Plan document for the specific project. The general intent of the RMP in this context is to define the scope of risks to be tracked and means of documenting reports. It is also desired that there would be an integrated relationship to other processes. An example of this would be explaining which developmental tests verify risks of the design type were minimized are stated as part of the test and evaluation master plan. A further example would be instructions from 5000.2D[4] that for programs that are part of a system of systems the risk management strategy shall specifically address integration and interoperability as a risk area. The RMP specific process and templates shift over time (e.g. the disappearance of 2002 documents Defense Finance and Accounting Service / System Risk Management Plan, and the SPAWAR Risk Management Process).

See also

  • Event chain methodology
  • Project management
  • Project Management Professional
  • Risk evaluation and mitigation strategy (REMS)
  • Risk management
  • Risk management tools
  • Risk management framework

References

1. ^PMBOK Guide 5th Edition, Glossary pg. 373.
2. ^{{cite book |title=Special Publication 800-37 RISK MANAGEMENT FRAMEWORK FOR INFORMATION SYSTEMS AND ORGANIZATIONS |date=May 2018 |edition=revision 2 draft |publisher=National Institute of Science and Technology |url= https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/draft}}
3. ^{{cite book |title=CRISC Review Manual |date=2015 |edition=6th |publisher=ISACA |isbn=978-1-60420-371-4}}
4. ^[https://acc.dau.mil/CommunityBrowser.aspx?id=44705&lang=en-US SECNAVINST 5000.2D 3.4.4.1]

External links

  • Georgia State University: Risk Management
  • Creating The Risk Management Plan (template included)
  • EPA RMP Rule page
  • Risk Management Guide for DoD Acquisition (ver 6 - ver 5.2 more detailed but obsolete)
  • Defense Acquisition University, System Engineering Fundamentals (see ch 15)
  • US DoD extension to PMBOK Guide (see ch 11)
  • [https://acc.dau.mil/CommunityBrowser.aspx?id=504118&lang=en-US Defense Acquisition Guidebook (DAG) - ch9 testing]
  • MSOffice template for Project Risk Management Plan
  • [https://acc.dau.mil/CommunityBrowser.aspx?id=25644&lang=en-US DAU Risk Management Plan template]
  • Crosstalk magazine - Risk Management issue

3 : Project management|Systems engineering|Risk management

随便看

 

开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。

 

Copyright © 2023 OENC.NET All Rights Reserved
京ICP备2021023879号 更新时间:2024/9/27 10:15:52