- Assumptions and constraint analysis
- Start by listing all assumptions and constraints for the project.
- Test them by asking if they could be false.
- If they could be false, would project objective(s) be affected?
- Write the risk statement if the answer to the questions is ‘yes’.
- Risk Breakdown Structure
- Hierarchical framework of potential sources of risk
- Hierarchical framework of potential sources of risk
- Brainstorming
- Best to use a risk breakdown structure or risk categories
- Modify standard brainstorming rules to include some evaluation of proposed risks
- Cause and Effect (Ishakawa) Diagrams
- The outcome is the impact of the risk
- The diagram then identifies risks as those uncertain events which could result in the occurrence of the impact
- For more information on Cause and Effect diagrams see fishbone diagrams
- Checklists
- Use a list of risks from a previous similar project
- Consider where each is relevant to the current project
- Delphi Technique
- Facilitated autonomous polling of subject matter experts
- Facilitator gathers the experts initial responses and circulates them to the group (without attribution)
- Experts can change their answers on the next round
- Usually generates a consensus after a few rounds
- Document Review
- Careful review of documents such as project charter, statement of work, contract terms, technical specifications, etc.
- Interviews
- Prompt Lists
- A prompt list is a set of risk categories that stimulate risk identification
- Can be used with interviews and brainstorming
- Questionnaire
- Use question format rather than statements
- Root-Cause Analysis
- Seek to identify basic causes of risks that may be visible symptoms of more fundamental forces
- SWOT Analysis
- Identify Strengths, Weaknesses, Opportunities and Threats
- Strengths and weaknesses relate to the characteristics of the organization conducting the project
- Opportunities and threats identify the project risks