Organization should pay more attention to portfolio risk management. True or False?
"The general who wins a battle makes many calculations in his temple before the battle is fought. The general who loses a battle makes but few calculations beforehand. Thus do many calculations lead to victory, and few calculations to defeat; how much more no calculation at all! It is by attention to this point that I can foresee who is likely to win or lose." - Sun Tzu
PPM provides Project Managers in large, project-driven organizations with the capabilities needed to manage the time, resources, skills, and budgets necessary to accomplish all interrelated tasks. It provides a framework for issue resolution and risk mitigation , as well as the centralized visibility to help planning and scheduling teams to identify the fastest, cheapest, or most suitable approach to deliver projects and programs.
Assessing risk at the project, portfolio, and business levels helps us understand risk, make better decisions, negotiate fair contracts, create risk mitigation scenarios, and improve teamwork.
By understanding risk to both individual projects and portfolios, management will be able to make better strategic decisions. Cost commitments, revenue pipelines, and profit forecasts will be accurately stated for each level of risk. The sensitivity of the forecasts will be better understood. When informed by the risk assessment, the entire business will be more profitable.
Why do projects fail? A project fails when the plan is not met. Failure means that a project exceeds the timeline, overspends the budget, or underperforms expectations. There are only two reasons why the plan is not met:
The plan is too optimistic. Overly optimistic plans are very common. They arise when actions and costs are forced to meet predetermined targets. Underbidding, scale-to-fit, and political spin are also common causes.
External events have an impact on the plan. Scope creep, insufficient resources, unanticipated work, and extraordinary events are some examples.
Risks Assessment Benefits for Project
Project contingency can make or break a project. Having too much contingency is uncompetitive; having too little contingency increases the chance of failure. Risk assessment—or allowing for uncertainty within estimates—helps set contingency levels, with a preferred level of risk, and gives the confidence level of outcome targets.
Contingency is often set at the task level, and it is common to add some contingency to every estimate. The amount of contingency added may even be a fixed amount—10 percent, for example. However, it is much better to set contingency at the project level. In other words, use the ranges on the task estimates to understand what contingency should be set for the project as a whole. Setting contingency at the project level reflects the reality that some tasks may be delayed whereas others may be completed on time or be finished early. The amount of management reserve can be set by the same principle—allowing drawdown against risks that were identified at the start of the project.
In addition to setting the right level of contingency, risk assessment also benefits the project team by giving it a forum for expressing concerns and for challenging or defending assumptions. Removing the restriction of having to work with deterministic (single-point) estimates allows team members to give open and honest opinions of what is likely to happen.
A risk assessment workshop is an important—but often ignored—occasion for the project team to come together. It can lead to discussion and clarification of the scope of project tasks, and missing work is often identified. As a result of the workshop, the project team reaches an improved awareness and understanding of the status of the whole project. Although the cost and schedule disciplines for a project are often separate, it is important for these groups to confer with each other. A risk assessment workshop can bring these disciplines together.
Risk assessments also enable risk response and mitigation strategies to be expressed. Cost/benefit analysis can be used to compare risk mitigation strategies and understand how effectively the money would be spent. When the cost of implementing the response is included in the comparison, it can show the net effect of the response on the project cost. The response can then be judged in terms of whether its net effect is to increase cost and whether that increase can be justified by the time it saves. Assessing risk mitigation strategies makes it possible to fully understand their effects.
Risk assessment enables contracts to be fairly negotiated, bids to be submitted at the right price, and sensitivity to be appreciated. In summary, risk assessment means that the project is better understood, can be better planned and managed, and can be more profitable.
Risks Assessment Benefits for Portfolio
Assessing the risk facing a group of projects leads to a better overall view of risk to the portfolio. Looking at the entire portfolio enables individual projects to be compared and understood in terms of their risk. This helps in selection of projects and focusing of management attention on the projects that most need it.
Contingency is best set at a portfolio level. Although not every project will suffer from risk, you know that some will, but you don’t know which ones. Management reserves for the portfolio can be set and drawn down by adherence to the same principles as those discussed in the previous section.
Projects in a portfolio often have interdependencies, shared resources, and shared goals. In risk assessment, they need not be considered in isolation. At the portfolio level, it is important to express risk arising from project interdependency. Risk at the portfolio level can be shared and balanced across projects as a way of mitigating it.
In summary, risk assessment enables to better understand and manage the portfolio as a whole. Organization can use the whole weight of the portfolio to manage the risk.
Risks Assessment Benefits for Business
Risk assessment increases profitability. Contracts can be selected and priced at the right level of risk, and the business can be managed with risk fully understood. Specific risks can be negotiated, it can be made clear who bears them, and they can be built in to contracts.
Cost commitments can also be understood and budgeted—with risk taken into account. Risk assessment can give cost commitment curves at preferred levels of confidence.
In addition, revenue estimates can be expressed as ranges, so revenue pipelines—as well as profit forecasts—can be understood. Investment decisions can be made at preferred levels of risk while taking into account all the best knowledge available.
Besides an understanding of cost and revenue pipelines, business decisions also require an understanding of risk sensitivity. Risk assessments deliver such an understanding.
Business can benefit from risk assessment by making better decisions based on accurate information. You benefit from realistic forecasting and an understanding of sensitivity, and you can make management decisions by taking into account the best current knowledge of the future.
Conclusion
In itself, the process of performing a risk assessment can give project, portfolio, business a greater chance of success. Assessments lead to the expression of outcomes as ranges, the development of risk mitigation plans, and the ability to set contingency.
Organizations have to make sure that risk management part of portfolio, need to identify risks at defining process of portfolio, need to communicate with all stakeholders about risk, consider both threats and opportunity, prioritize risks on regular basis, constantly analyze risks, plan and implement risk response, register portfolio risks, track risks and associated tasks, risk ownership.
Organizations have to ensure all the portfolio management processes, plans, policies, and procedures in the light of PMI standards on portfolio management are in place


