Project Risk Management

Risk management in projects often becomes a compliance exercise. A workshop at the start produces a long register of vague risks such as "delays" or "budget overrun", scores are assigned by feel, owners are named but not accountable, and the register is updated only before reviews. Contingency is a flat percentage, opportunities are ignored, and the sponsor never sees how risk exposure is changing. When a risk occurs, the team discovers that nothing was prepared.

This programme treats risk management as a working part of project control. It moves through five stages: setting up the risk framework and appetite, identifying and describing risks properly, assessing them with qualitative and quantitative methods, planning and implementing responses, and monitoring, reporting and learning. Throughout, risk is linked to the schedule, the budget and the decisions the project must make.

Built on recognised practice. The programme references the principles and process of ISO 31000, the risk assessment techniques described in IEC 31010, the PMI Standard for Risk Management in Portfolios, Programs, and Projects, the risk aspects of the PMI PMBOK Guide and ISO 21502, and established methods of quantitative schedule and cost risk analysis. Participants learn to apply them in proportion to the project's size and complexity.

Decisions this programme improves. Which risks deserve management attention; how much contingency and management reserve to hold and who controls it; whether to avoid, transfer, reduce or accept a risk; when a risk should be escalated to the sponsor or portfolio level; how to allocate risk in contracts; and whether a project's risk exposure is within the organisation's appetite.

How it is delivered. Twenty hours across five sessions, built around one running case: a project with technical, commercial, supplier and stakeholder risks. Participants run a risk identification workshop, write cause-risk-effect statements, build a probability and impact assessment, run a simple Monte Carlo simulation in a spreadsheet to set contingency, and prepare a risk report for the sponsor.

In-house option. For organisations, the programme can be tailored to your own risk policy, enterprise risk framework, project types and registers, and delivered to project, risk and finance teams together.

Who Should Attend

Project and programme managers responsible for managing project uncertainty

Project controls professionals: planners, cost controllers and risk analysts

PMO staff setting project risk standards and reporting

Risk management professionals supporting projects from an enterprise risk function

Engineers and team leaders who contribute to risk identification and responses

Objectives

Explain the principles and process of risk management as described in ISO 31000 and apply them to projects

Prepare a project risk management plan with roles, scales, thresholds and review frequency

Use several identification techniques to find threats and opportunities

Write clear risk statements that separate cause, risk event and effect

Assess risks with probability and impact scales and prioritise them consistently

Run a basic quantitative schedule and cost risk analysis and interpret P50 and P80 results

Select and plan risk responses for threats and opportunities, with owners and actions

Set contingency and management reserve based on risk exposure

Monitor risks with indicators and report risk exposure trends to the sponsor

Link project risk management to contracts, procurement and enterprise risk management

Course Outline

Setting the Framework: Principles, Appetite and the Risk Plan

Why project risk management fails: registers without action
Uncertainty, threats and opportunities
ISO 31000 principles and process applied to projects
Risk appetite, tolerance and thresholds
Roles and responsibilities: sponsor, project manager, risk owners and action owners
The project risk management plan: scales, categories and review cycle

Identifying and Describing Risks

Identification techniques: workshops, interviews, checklists, assumptions analysis and SWOT
Risk breakdown structures and risk categories
Writing cause-risk-effect statements
Recognising cognitive biases in risk identification
Stakeholder, supplier and contractual risks
Emerging risks: cyber security, supply chain disruption and climate-related risks

Assessing Risk: Qualitative and Quantitative Analysis

Probability and impact scales and the risk matrix, including its limitations
Prioritisation and risk ranking
Selecting assessment techniques using IEC 31010
Three-point estimates and probability distributions
Monte Carlo simulation for schedule and cost risk
Reading S-curves, confidence levels and tornado charts
Expected monetary value and decision trees

Responding to Risk: Strategies, Owners and Contingency

Response strategies for threats: avoid, transfer, reduce and accept
Response strategies for opportunities: exploit, share, enhance and accept
Escalation to programme, portfolio or enterprise level
Contingency and management reserve: calculation, ownership and drawdown rules
Risk allocation in contracts, insurance and guarantees
Contingency plans, fallback plans and secondary risks

Monitoring, Reporting and Learning

Updating the risk register and tracking response actions
Key risk indicators and exposure trends
Risk reporting for sponsors and steering committees
Risk reviews, audits and health checks
Digital risk registers and realistic uses of analytics and AI
Building a risk-aware project culture and capturing lessons learned
Action plan: improving risk management on your projects

Competencies

Project risk management planning

Risk identification and risk statement writing

Qualitative risk assessment and prioritisation

Quantitative schedule and cost risk analysis

Threat and opportunity response planning

Contingency and management reserve setting

Contractual risk allocation

Risk monitoring and reporting

Integration of project and enterprise risk management

Live Online

Access Elite Academy’s complete training portfolio live online. Organizations, distributed teams and professionals can join scheduled interactive sessions or request any program to be delivered online, subject to scheduling and delivery requirements. Elite Academy’s Live Online Training provides access to our complete portfolio of professional programs without linking availability to a physical destination. Organizations, multi-location teams and individual professionals can join scheduled instructor-led sessions or request any program from the Elite Academy portfolio for live online delivery, subject to scheduling and delivery requirements. The format preserves real-time interaction, expert guidance and practical learning while removing the need to travel. Browse the current Live Online schedule below or request your preferred program and dates.