This process ensures that all project risks are identified, assessed and managed. It also helps to manage project risk proactively. This is done by reducing the probability of a risk occurring, identifying contingency plans where needed and at times justifying that a risk is accepted. Countermeasures (mitigation) should be considered for every risk. The nature and extent of the countermeasure will depend on the nature of the risk and on the impact assessment carried out. Countermeasures must be noted in the Risk Log and included in the Delivery Plan and/or Timebox Plans, either as specific actions to prevent or reduce the risk or through re-balancing the MoSCoW priorities in order to deal with risk. Contingency plans should be linked to specific risks. So in a Timebox where significant risk has been identified, it is advisable to increase the proportion of Should Have and Could Have requirements providing additional contingency for the guaranteed delivery of the Must Have requirements There is a perception to that risk management is a Project Manager responsibility. However in reality, the whole team should be aware of the risks, even though the Project Manager may drive risk management. Since the focus of the project is on delivering a business solution and the risks could affect the success of the project, a decision to cancel a project, especially during the early stages, is sometimes made based on an unacceptably high level of risk.
There are some common factors that will make Atern the most appropriate approach in order to reduce risk. Following the wrong or inappropriate approach can dramatically increase the risks. For example:
Adopting a traditional approach where a project must deliver on a fixed date adds a risk since a traditional approach expects to use time as contingency.
Adopting one of the agile approaches which promote ‘No design up front’ (NDUF) can introduce significant risks when delivering a solution into a complicated corporate architecture.
Adopting a traditional approach which mandates ‘Big Design Up Front’ (BDUF) can restrict flexibility and creativity.
Therefore the choice of approach will affect whether something is seen as a risk or simply business as usual. The following table shows some typical situations which can exist on a project and how using Atern can reduce these risks.