Free Essay

Risk Management

In:

Submitted By rinahor92
Words 5801
Pages 24
International Journal of Project Management 19 (2001) 79±87

www.elsevier.com/locate/ijproman

Managing incomplete knowledge: Why risk management is not sucient
Steven Pender *
SMS Consulting Group, 4/60 Marcus Clarke St, Canberra, ACT, Australia Received 1 December 1998; received in revised form 8 July 1999; accepted 14 July 1999

Abstract The Project Management Institute's Guide to the Project Management Body of Knowledge (PMBOK) underpins many initiatives to improve project management practice. It is widely used for training and underpins the development of competency standards. Because of its fundamental importance, the PMBOK should be critically reviewed. This paper agues for an expansion of the PMBOK Guide's risk management knowledge area to include a wider perspective of incomplete knowledge. The PMBOK Guide deals with uncertainty through the traditional use of probability theory, however the underpinning assumptions of probability theory do not always apply in practice. Furthermore, probability-based risk management theory does not explain important aspects of observed project management practice. This paper discusses an expanded framework of incomplete knowledge, including: an expanded concept of uncertainty that acknowledges ignorance or surprise, where there is no prior knowledge of future states; imprecision arising from ambiguity (fuzziness) in project parameters and future states; and, human limitations in information processing. The paper shows the expanded framework explains observed project-management practice more thoroughly than the probability-based framework. The conclusion reached is that ``management of incomplete knowledge'' provides a better theoretical foundation for improving project management practice. To substantiate this, a promising new approach based on ``real options'' is also discussed. # 2001 Elsevier Science Ltd and IPMA. All rights reserved.
Keywords: Risk management; Uncertainty; Ambiguity; Human limitations; Real options

1. Introduction Concern with uncertainty seems to grow as a ®eld of knowledge matures. This has been observed in the evolution of physics, operations research, economics, ®nancial management and a number of other ®elds. It is also happening with project management. Practising project managers have long known that managing uncertainty is important, but formal recognition as a project management function has been relatively recent. For example, risk management was only separated into its own knowledge area in the 1986/87 update of the Guide to the Project Management Body of Knowledge (PMBOK1).
* Tel.: +612-6230-1211. E-mail address: sfpender@ozemail.com.au (Steven Pender). 1 For ease the term PMBOK is used in this paper to refer to the Guide to the PMBOK (PMI 1996).

As with other ®elds of knowledge, it has been traditional in project management to deal with uncertainty by using probability theory. Whether by conscious design or not, probability theory also underlies the risk management knowledge area in the PMBOK and other references such as the national and international riskmanagement standards. Other ®elds, such as operations research and ®nancial management, have expanded beyond the sole reliance on probability theory, and have recognised important aspects of uncertainty do not lend themselves to analysis by probabilistic methods. The same should apply to project management. Probability theory cannot deal with important aspects of project uncertainty and cannot explain some important aspects of observed project-management practice. The main purpose of the PMBOK is to identify and describe generally accepted project management knowledge. [1, p.3] This paper does not claim that the theories and techniques herein are `generally accepted'. However

0263-7863/01/$20.00 # 2001 Elsevier Science Ltd and IPMA. All rights reserved. PII: S0263-7863(99)00052-6

80

S. Pender / International Journal of Project Management 19 (2001) 79±87

it shows the PMBOK is ®rmly rooted in a probabilitybased paradigm that limits its ability to explain actual project management practice. Limitations include the following: . Probability theory is based on the assumption of randomness, whereas projects deal with consciously planned human actions that are generally not random. . Projects are unique by de®nition. This reduces the relevance and reliability of statistical aggregates derived from probability-based analysis. . Probability theory assumes future states are known and de®nable, however uncertainty and ignorance are inevitable on projects. Especially with regard to human actions, the future is fundamentally unknowable. . We humans are limited in our ability to encompass and process the full range of information required for holistic decisions. . Because uncertainty and ignorance exist, temporal aspects of the ¯ow of knowledge are important in project planning. Probability theory is based on a two-period model that ignores the ¯ow of knowledge over time. . Project parameters and outcomes must be communicated to others and the imprecision of our language is not encompassed in probability theory. Projects therefore require an expanded approach to incomplete knowledge. This paper aims to open up discussion about the value and usefulness of a broader approach incorporating fundamental uncertainty and ignorance, the theory of fuzzy sets and the temporal aspects of knowledge. It is beyond the scope of the paper to expand on each of these theories. The paper therefore concentrates on the limitations of the probability-based approach and how an expanded approach could be used to better explain real-world project management practice. Finally, the options approach to project planning is discussed to demonstrate the value of the new theories. 2. Dominant paradigm The dominant paradigm of risk analysis is undoubtedly the expected utility theorem that provides the foundation of probability calculus. Under this theory, the laws of probability apply if certain assumptions are met, including: . . . . . Knowledge of probable future states. Rationality. Frictionless transactions. Random events. Repeatability.

. Comparability. . Optimisation goal. It is interesting to remember that probability theory arose from attempts to quantify the odds in games of chance. This heritage, with the associated set of assumptions, limits how the theory may be applied to other ®elds. In games of chance the range of possible outcomes is perfectly known. For example take the throw of a die. The possible outcomes are represented by the set of discrete integers one to six. If one dollar is placed on a roll of a die the risk is preciseF F F there is a one in six chance of a particular number turning up and the potential monetary loss is precisely one dollar. Such conditions do not generally apply in project management. Relying on probability theory can mask other aspects of incomplete knowledge and can lead to a false sense of accuracy and precision. Consequently incorrect decisions may be made. The applicability and consequence of these assumptions to project management is discussed below under the following headings: . . . . . . Randomness. Repeatability. Human limitations. Uncertainty and ignorance. The ¯ow of knowledge. Fuzzy parameters.

2.1. Randomness The assumption of randomness requires that each event is independent of all other events and that no knowledge passes between them. In live projects, this rarely applies. As Trigeorgis [2, p.130] states, managers face two types of uncertainty: . Random variations in the state of nature (where the rules of probability apply). . Non-random or speci®cally targeted actions and reactions made by human players (where the rules of probability do not apply). E€ective human interaction is vital to project success.2 Human interactions are rarely random and involve all the positive and negative aspects of human nature including bias, spite, competition, loyalty, revenge and so forth. Human interaction is not noted for its randomness! So while the traditional risk management approach applies to random events, applicability to project management is low. Therefore an expanded approach is
For example see the discussion on the importance of communication skills below.
2

S. Pender / International Journal of Project Management 19 (2001) 79±87

81

needed to incorporate the non-randomness that tends to dominate project management. 2.2. Repeatability Most projects are unique endeavours and opportunities to reuse statistical information are limited. Knowledge gained from previous projects often does not generalise well to future projects. The tools of probability theory, which rely on historical knowledge, are of limited value in most project circumstances. As Shackle [3, p.5] states: `The theory of probability, in the form which has been given to it by mathematicians and actuaries, is adapted to discovering the tendencies of a given system under inde®nitely repeated trials or experiments. In any set of such trials, each trial is, for the purpose of discovering such a tendency, given equal weight with all the others. No individual trial is considered to have any importance in itself for its own sake, and any tendency which may be inductively discovered, or predicted a priori for the system, tells us nothing about any single individual trial which we may propose to make in the future.' 2.3. Human limitations As Miller [4] summarised in his well know paper `The Magical Number Seven, Plus or Minus TwoF F F', humans have a limited information processing capacity. It seems that about nine decision attributes is all that a person can e€ectively encompass at one time. Group techniques might broaden the perspective somewhat, but even still human information-processing limitations will often preclude optimal (holistic) decision making. The traditional project management approach is to decompose problems into understandable chunks by work breakdown structures, functional decomposition, speci®cation hierarchies and the like. These reductionist approaches help us cope with complexity, but they tend to destroy a holistic perspective of the project. It is often beyond our capacity to comprehend a complete set of future outcomes (as required by the tools of probability), even though the information may be available in some form. Therefore in a very practical sense, fundamental uncertainty and ignorance are inevitable parts of project management. Project managers need something more than the tools of probability theory to deal with it. 2.4. Uncertainty and ignorance There are several de®nitions of risk and uncertainty. One view, attributed to the seminal work of Frank

Knight [5], de®nes risk as the form of incomplete knowledge where the future can be predicted through the laws of chance. That is where probability distributions of future occurrences can be constructed.3 Uncertainty can then be de®ned as the variability of future outcomes where probability distributions can not be constructed.4 Using these de®nitions, risk applies when there is repetition and replicability. Uncertainty applies when there is no prior knowledge of replicability and future occurrences defy categorisation. By the very de®nition of a project being a unique undertaking [5, p.4], one would expect a large part of project management to involve uncertainty (as de®ned above). Indeed the limiting case of `total ignorance' or fundamental uncertainty [3] often applies, where future states cannot even be imagined let alone de®ned. Both uncertainty and ignorance is poorly handled in probability theory. 2.5. The ¯ow of knowledge with time The assumptions underlying the expected utility theorem are based on a model with two time periodsF F F the present and the future. In essence, probability-based analysis works this way: . At Time Period 1 (the present), analysis of future states and their probability distributions leads to a rational plan of action that maximises expected positive outcomes. . The plan is then implemented and the predicted consequences of the plan are realised at Time Period 2 (the future). This two-period model falsely implies the role of a project manager is limited to analysis and planning. It assumes project management throughout the project is essentially passive. The project weaves through a predetermined branching path according to the states of nature encountered on the way. It also implies that once a project commences, the plan will be implemented unchanged because risks are known and remain constant. It is a platitude to experienced project managers to say this does not re¯ect reality. Projects are by de®nition unique and knowledge of future states is limited. Project managers know that each stage of a project reveals additional knowledge and active, hands-on project management is needed to reassess project plans, to imagine new possibilities, to amend plans and to implement changes.
Another view of risk is that it is the downside subset of uncertainty associated with calamitous events. This con¯icting de®nition and other de®nitions cannot be pursued within the scope of this paper. 4 It should be noted that several modern authors dispute Knight as the source of this de®nition but it serves this paper to use the distinction to portray the existence of di€erent states of future knowledge.
3

82

S. Pender / International Journal of Project Management 19 (2001) 79±87

and other factors such as context and mood. When a large number of people are involved the magnitude of the fuzziness increases. Project parameters and outcomes have `shades of grey6'. Take for example the following statements: ``If the schedule slippage is very small and the design changes are great then the cost impact will not be insigni®cant.'' ``The installation was a grand failure.'' ``System performance is inadequate.''
Fig. 1. Computer application development risks.

Typically, the uncertainty of a project reduces with time as more knowledge is progressively revealed. For example in the case of a mining project, the extent of the ore body and extraction considerations may not be known until core sampling and surveying has been completed. Another example is shown below in Fig. 1. The chart shows the typical ¯ow of planned costs and residual risks over the life of a typical large computer software development project. The chart is made up of two curves. The lower curve represents the accumulating costs of the ideal outcome where the whole project is completed without any correction, rework or back tracking. The upper curve represents the extent of the possible rework faced at a given point in time. The shaded band between the two curves is an indicator of the uncertainty on such projects. Notice the uncertainty band starts large and diminishes in steps to zero at the close of the project. In these circumstances, probability analysis is usually of limited value because the range of future states varies at each point in time, as additional knowledge is discovered. The PMBOK Risk Management Knowledge area and other guides relying on probability theory are de®cient in not addressing the temporal ¯ow of knowledge and uncertainty. 2.6. Fuzzy parameters Risk and uncertainty are concerned with incomplete knowledge over the future `states of nature'. It is often forgotten that probability techniques assume that decision parameters and outcomes fall into well-de®ned, mutually exclusive5 categories. In reality vagueness and ambiguity exist, due to the limitations of our language
Often the term ``crisp'' is used to describe unambiguous categorisation. (compare with the term ``fuzzy''). The assumption of crispness comes from the gaming heritage of probability theory, already discussed.
5

This type of statement often occurs in projects and re¯ects the true imprecision of project processes and outcomes. Enforcing more precise language (as with technical speci®cation language) may merely create an illusion of precision. Imprecise statements cannot be interpreted within the framework of probability theory because of its assumption of crisp inputs and outputs. The theory of fuzzy sets provides a framework and o€ers a calculus to address these fuzzy statements. Zadeh [6] states the theory of fuzzy sets: `F F F provides a natural way of dealing with problems in which the source of imprecision is the absence of sharply de®ned criteria of class membership rather than the presence of random variables.' In the context of fuzziness we deal with the possible not only the probable. Possibility is the degree of ease with which a variable may take a value. Possibility describes whether an outcome can happen while probability describes whether it will happen. Unlike probabilistic categorisation, possibility categorisation allows overlapping, fuzzy sets where the truth (or believability) of categorisation is measured as a degree of membership falling between zero and one. For example a certain project outcome might simultaneously have a degree of membership of the category `failure' and a degree of membership of the category `substantial failure'. This is shown diagrammatically below in Fig. 2. Notice that Outcome 1 falls in both the category `failure' and the category `substantial failure' albeit with di€erent degrees of membership. Loose relationships between probability and possibility exist. For example lowering the possibility of an occurrence tends to reduce its probability but the reverse does not apply. Probability theory does not get

Zadeh used the term lexical elasticity to describe these shades of grey. See the forward to Dubois and Prade [7].

6

S. Pender / International Journal of Project Management 19 (2001) 79±87

83

Fig. 2. Fuzzy categorisation of a project outcome.

displaced or even subsumed by the theory of fuzzy sets and the two approaches are complementary. Probability theory is good for crisp but dispersed information. The theory of fuzzy sets is good for fuzzy but coherent information [15]. 3. Limitations of existing reference material The PMBOK purports to re¯ect widespread project management practice. It aims to be a document for practitioners, not a theoretical reference. In this sense it should be theory neutral. This section shows how the risk management knowledge area is strongly steeped in the probability theory paradigm.7 In the PMBOK, the risk management process follows a cycle of: . . . . Risk Risk Risk Risk identi®cation. quanti®cation. response development response control.

These de®ciencies may be a consequence of widespread, subconscious reliance on the probability-theory paradigm. Ignorance and fuzziness cannot be incorporated in the probability-based models and can only be dealt with as externalities in an ad hoc manner. For example the PMBOK (p.120) mentions contingency and multi-level reserves but o€ers no guidance on how to determine them and no guidance on when to exercise them. There is nothing in the PMBOK that locks out an expanded view of incomplete knowledge but the language used and the scope of techniques included shows it is rooted in the probability-theory paradigm. The Guide to the PMBOK is not alone in these de®ciencies because other well-known references on risk management take the same limited perspective on knowledge imprecision such as: . Standards Australia, 1995. AS/NZS 4360:1995: Risk Management [8]; . NSW Public Works Department, 1993. Guidelines for Management of Risk [9]; . Management Improvement Advisory Committee (MIAC), 1995. Exposure Draft: Guidelines for Managing Risk in the Australian Public Service [10]. 4. Practical evidence supporting and expanded approach This section describes aspects of observed project management practice that are better explained by an expanded perspective of incomplete knowledge. 4.1. Multi-layer reserves Experienced project-based organisations often set aside a percentage of each project budget as a reserve for unforeseen events. Sometimes the reserve budget is splitF F F some being under the control of the project

Risk identi®cation is based on identifying discrete occurrences of risk that may a€ect the project for better or worse. [1, Glossary p.169] By omission the process assumes that all risks are indeed identi®able. Nowhere does the PMBOK allude to the ignorance or the fuzziness discussed above. The PMBOK section on risk quanti®cation acknowledges diculties in quantifying risk [1, p.115] due to imprecise or incomplete knowledge. This being the case, no systematic approach to overcoming the problems is given. For example statistical techniques such as statistical sums, Monte Carlo simulation and decision trees are discussed. Such analysis can involve signi®cant additional expense and is only warranted in the rare instances where the assumptions of probability theory apply.
The theory bias of the Guide to the PMBOK probably occurred by default rather than by speci®c intent.
7

84

S. Pender / International Journal of Project Management 19 (2001) 79±87

manager and some being under the control of higher management.8 Reserve budgets implicitly acknowledge the existence of ignorance in projects, but there is no guidance in the PMBOK about how to form or control reserve budgets. An expanded perspective on incomplete knowledge would provide a ®rmer theoretical foundation for this practice. 4.2. Rolling-wave approach The `rolling wave' approach to projects is increasing in acceptance and practice. This approach recognises that ®rm commitments cannot sensibly be made on incomplete knowledge. Therefore binding commitments are phased to match the ¯ow of knowledge. Initially, ®rm (binding) commitments are only made on the ®rst phase of the project, and budgetary (nonbinding) commitments made on subsequent phases. As the project rolls through to the end of one phase, a ®rm commitment is made on the next phase and budgetary commitments for follow-on phases are reviewed. This can be visualised as a bow wave of commitment rolling in front of each phase. As with multi-layer reserve budgets, the rolling wave approach implicitly acknowledges the existence of ignorance in projects. The probability-based approach in the PMBOK does not include the concept of a temporal dimension to knowledge and gives no guidance on how to phase the project according to the ¯ow of knowledge. An expanded perspective on incomplete knowledge could provide a ®rmer theoretical foundation for this practice. 4.3. Importance of communication Many studies place communication skills at the top, or near the top of the skills required by successful project managers [for example, see Ref. 11]. This can in part be explained by the existence of fuzziness in project parameters and outcomes. Many occurrences on projects are open to elastic interpretation and the consequences of this fuzziness can only managed by e€ective and persistent communication. On a more formal basis, the theory of fuzzy sets can provide a calculus for handling fuzziness in project planning and should be included in an expanded perspective to incomplete knowledge. 5. Options approach to project planning This paper so far, has presented the argument that the PMBOK risk management area is limited and should be
As an example of this practice, these multi-layer reserve budgets are formally allowed for under the Cost Schedule Control System Criteria.
8

expanded to incorporate other areas of incomplete knowledge. This section discusses the options approach to project planning. This approach systematically deals with incomplete knowledge and adds a temporal dimension that is lacking in the traditional approach. The options approach is promising but still immature and is included here to demonstrate the bene®ts to be gained by expanding the PMBOK. In 1973, Black and Scholes [12] published their seminal work on the quantitative valuation of ®nancial options. Financial options have become common investment vehicles in the ®nancial markets, but it was Myers in 1977 [13] that ®rst alluded to the analogy between ®nancial-market discretionary investment and productmarket discretionary investment (often called `real options'). Myers drew the analogy that an investment project may be considered an `option' on the produced commodity and the value of the `options' generated by an investment are an important consideration. The valuation of an option is portrayed in the next two diagrams. Fig. 3 shows the future value of an asset has a spread of value associated with uncertainty. A futures contract buys the obligation to take delivery of the asset in the future. The value of the futures contract is a depreciation of the expected future value. In contrast, an options contract buys the right (but not the obligation) to take delivery of the asset in the future. This eliminates the downside risk associated with the future value of the asset, but there is a premium to be paid for this bene®t. Fig. 4 shows two circumstancesF F F high uncertainty and low uncertainty. Notice that the option value increases with increasing uncertainty. In planning terms, this means the attractiveness of retaining an option (¯exibility) is high in circumstances of high uncertainty.

Fig. 3. Real options valuation.

S. Pender / International Journal of Project Management 19 (2001) 79±87

85

Fig. 4. High uncertainty = high options value.

How does this relate to project management? Overall, a project can be thought of as an option to use the asset it creates. For example, a project to modernise a production line buys the option (but not the obligation) to produce a new or revised range of products. The options approach considers the value of ¯exibility, not only the value of the project's net income stream. At a detailed level, a project plan can be thought of as a nexus of options. The options approach considers the way ¯exibility is created and destroyed through time. Optimal project planning therefore maximises the total value of costs, income and ¯exibility. As a project progresses, some decisions reduce ¯exibility and therefore reduce the options value. For example, when the design of the production line is committed, future project ¯exibility (and options value) is reduced. Other decisions retain or increase ¯exibility and therefore increase options value. For example, securing additional ¯oor space for the production line may increase downstream ¯exibility in the choice of machine tools. The options approach recognises the `value' and the cost of these options and encompasses this in the project planning and execution processes. In general: . The greater the degree of ¯exibility a€orded by a decision9 or action, the greater the value to the project.
9 Or indeed non-decision as there may be options value in deferring a decision until more information is available and the situation of uncertainty is reduced.

. The greater the degree of uncertainty that exists the greater the value of retaining or gaining ¯exibility. If the options value is ignored, there will be a systematic under-valuation of some alternatives. All other things equal, this e€ectively distorts decisions to favour the safer, more predictable alternatives that are usually associated with a shorter time-horizon and limited perspective. Ultimately the result is a sub-optimal project management. The options approach incorporates the concept of `active management'. Unlike the probability-based approach, the options approach recognises the ¯ow of knowledge throughout the life of a project. Experienced project managers know that projects require active hands-on management. Every day managers make decisions on alternatives, for example to proceed with or cancel work, to change the level of output, to reallocate resources and so forth. Indeed, prudent and ecient project management demands that these options be regularly assessed. Trigeorgis [2] reviews the current state of research into real options. Table 1 below shows his categories of real options. All these categories are relevant to project management: Kester [14] proposes the following scheme to assess the value of an option: . Step 1 Competitive advantage. Is the option available to your organisation only or is it shared? . Step 2 Interrelations. Is it a simple option or does it rely on other projects or activities? . Step 3 Urgency. Will the option expire or be lost soon or can it be exercised in the future?

86

S. Pender / International Journal of Project Management 19 (2001) 79±87

Table 1 Categories of real options [adapted from 2] Category Option to defer Description Holding a lease (or an option to buy) on valuable land or resources. The decision to build plant or develop a ®eld can be deferred until justi®ed by output prices. Investment is staged such that the project may be abandoned if new information is unfavourable. Each stage is viewed as a compound option on the value of the subsequent phases. If new market information is favourable production can be expanded. Conversely if new information is unfavourable production can be contracted. Projects may be permanently abandoned to realise the resale value of the assets in second-hand markets. According to new information, the output mix of a facility can be changed (`product' ¯exibility). Alternatively, the same output may be produced using di€erent types of input (`process' ¯exibility). Early investment such as R&D, undeveloped reserves etc. opens up future, interrelated growth opportunities such as new line of products, access to new markets and strengthening of core capabilities. (inter-project compound options). A `collection' of various options where the value of the whole is greater than the sum of the values of the individual options. It includes value-enhancing `call' options, and downward-protection `put' options. Important in Natural resource projects including real estate and farming. R&D intensive industries and long-term development, capital intensive projects including construction, energy generation and start-up ventures. Natural resource industries such as mining projects. Cyclical industries such as fashion, consumer goods and consumer real estate. Capital intensive industries such as airlines, railroads, ®nancial services and new product markets in uncertain markets. Product Flexibility. Goods subject to volatile demand such as consumer electronics, toys and automobiles. Process Flexibility. All feedstock-dependant facilities such as oil, electric power, chemicals. All infrastructure or strategic projects especially high technology, R&D, multi-national operations, strategic acquisitions. Most real-world investment situations.

Time to build option (staged investment) Option to alter operating scale

Option to abandon Option to switch (e.g. inputs or outputs)

Growth options

Multiple interacting options

Let us examine a simple example of how project planning may use the options approach: You are the Project Manager for the development of a new suburban site. Part of your project involves laying new power distribution cables. There is a related project to lay a new fibre-optic telecommunications infrastructure throughout the city. There could be major benefits if the same underground routes were used for both the power cables and the communications fibre. The problem is the fibre project has only just commenced. Delaying the design of the power distribution system involves additional costs to your project. This produces a bias for committing to a design now. However, this will involve an irreversible cost if the design is unsuitable for the fibre network. The uncertainty of design requirements for the fibre network means a high `options' value associated with not committing to a design. This produces a bias against committing to a design for the power system.

In this example, let us assume the `options' value of delaying the power system design, initially exceeds the `real' costs involved with waiting. At some later time in the project, knowledge about the fibre network will increase and uncertainty will decrease. The `options' value will fall below the `real' waiting costs and a decision to proceed design should be made. This decision point should be reflected in the project schedule. Notice that the options approach has provided a systematic way of including uncertainty and the flow of knowledge in the project schedule. The options approach could have been used to consider other hybrid alternatives. For example, if multiple power designs were produced in the absence of firm fibre requirements, the additional design cost may be offset by the options value of accelerated implementation once fibre requirements were firm. That is, by a current outlay you may purchase the opportunity (not the obligation) for future benefits.

S. Pender / International Journal of Project Management 19 (2001) 79±87

87

References
[1] Project Management Institute (US) Standards Committee. A Guide to the Project Management Body of Knowledge. Reproduced by Australian Institute of Project Management, 1996. [2] Trigeorgis L. Real Options: Managerial Flexibility and Strategy in Resource Allocation. Cambridge, MA: MIT Press, 1996. [3] Shackle GLS. Expectation in Economics. 2nd ed. Cambridge, MA: Cambridge University Press, 1952. [4] Miller GA. The magical number seven, plus or minus two: some limits on our capacity for processing information. The Pychological Review 1956;63(2):81±97. [5] Knight FH. Risk, Uncertainty and Pro®t. Boston: Houghton Mi‚in, 1921. [6] Zadeh LA. Fuzzy sets. Information Control 1965;8:338±53. [7] Dubois D, Prade HM. Possibility Theory : an approach to computerized processing of uncertainty. New York: Plenum Press, 1988. [8] Standards Australia. AS/NZS 4360:1995: Australian/New Zealand Standard of Risk Management. Sydney: Standards Australia, 1995. [9] NSW Public Works Department. Guidelines for Management of Risk. Sydney: NSW Government, 1993. [10] Management Improvement Advisory Committee (MIAC). Exposure Draft: Guidelines for Managing Risk in the Australian Public Service. Canberra: Australian Government Printing Service, 1995. [11] Posner BZ, What it takes to be a good project manager, PMI Project Management Journal 1987; (March) [12] Black F, Scholes M. The pricing of options and corporate liabilities. Journal of Political Economy 1973;81:637±54. [13] Myers SC. Determinants of corporate borrowing. Journal of Financial Economics 1977;5:147±75. [14] Kester CW, Today's options for tomorrow's growth, Harvard Business Review 1984;153±60 (Mar/Apr) [15] Kosko B. Neural Networks and Fuzzy Systems: A Dynamic Systems Approach to Machine Intelligence. New Jersey: PrenticeHall, 1992.

Fig. 5. The span of incomplete knowledge.

The value of real options is dicult to quantify and this has been acknowledged by Trigeorgis [2] who states the complexity of real investments is such that analytical solutions or numerical routines may not be available. Indeed, quanti®cation may only occur when the probability distribution of future outcomes is known and as we have discussed this is not the norm for project management.10 It is beyond the scope of this paper to discuss other techniques for valuing real options, but this does not detract from the demonstration that the options approach provides an important conceptual framework for project planning. 6. Conclusion In conclusion, this paper has attempted to show that the PMBOK and other reference material is based on probability-based risk management theory. Analysis of the underlying assumptions of the probability-based approach shows it has limited applicability. A theoretically sound foundation for the management of imprecision would include fundamental uncertainty, ignorance and fuzziness as shown in Fig. 5 below. The paper shows the expanded framework is better than the PMBOK at explaining certain aspects of observed project management practice. The paper also shows the expanded framework may lead-in new techniques for project planning and execution. An example is the real-options approach that looks promising, however more research is required on its practical application. This paper does not advocate an immediate change to the PMBOK, but rather hopes to initiate discussion in the project-management fraternity about an expanded approach to managing incomplete knowledge. This should in turn prompt more research into practical applications that ultimately may ®nd their way into the PMBOK.

Steven Pender has been involved with project management for over twelve years. Project management jobs have included: defence capital procurement; large-scale systems integration; project management systems & methodology consulting; and tertiary-level project management training. He is currently with SMS Consulting Group providing project management services to Australian Government agencies and large corporate clients. Steven has a Bachelor of Engineering (Mech.) degree and a Master of Management Economics degree from the University of New South Wales (UNSW). He is currently doing a PhD at University College, UNSW. The topic is `Embodying rapid environmental change in the corporate capital allocation process', and this paper relates to a component of his research.

10 Where a futures market for the project's underlying asset is traded on a futures market (such as energy or primary production) options valuation may be meaningfully quanti®ed.

Similar Documents

Premium Essay

Risk Management

...Chapter 1 6 1. INTRODUCTION TO RISK MANAGEMENT 6 1.1. Risk Management-An Overview 6 1.2. IMPORTANCE OF THE RESEARCH 7 1.3. RISK MANAGEMENT EMERGANCE-REASONS AND FACTS 8 1.4. RESEARCH METHODOLOGY 9 1.5. LIMITATION OF RESEARCH 10 CHAPTER 2 11 2. LITERATURE REVIEW 11 2.1. DEFINITION OF RISK MANAGEMENT 11 2.2. DIFFERENT TYPES OF RISKS IN BUSINESS 12 2.3. CONSTRAINTS 14 2.4. RISK ASSESSMENT 14 2.5. HISTORY OF RISK MANAGEMENT 15 2.6. PROCESS OF RISK MANAGEMENT 15 2.7. Enterprise Risk Management 16 2.8. ERM&CRO 18 2.9. BANKING RISK 19 2.10. Credit risk management in UK banking sector 19 CHAPTER 3 21 3. ANALYSIS AND DISCUSSION 21 3.1. ECONOMIC CRISIS AND BANKS OF UK 21 3.2. Minimizing the moral difficulties involved in the originate and distribute model of banking. 22 3.3. Transparency of risk in financial products is essential if regulation is to work 22 3.4. Reform Basel ii so that it is not so pro-cyclical 23 3.5. RISK MANAGEMENT AND COSTS OF BANKING CRISIS 24 3.6. Costs of Risk 25 3.7. SIGNIFICANCE OF REGULATORY STYLE 26 3.8. KEY WAYS TO MITIGATE BUSINESS RISK 27 3.9. Risk dash board every bank needs 28 3.10. ROYAL BANK OF SCOTLAND 29 3.11. RISK MANAGEMENT AT KENYA COMMERCIAL BANK (KCB) 29 3.12. Risk management in hotel and tourism industry in India and in the whole world 30 3.13. The management of risk in agricultural sector in the United States of America 31 3.14. THE ROLE OF INTERNAL AUDITORS IN RISK MANAGEMENT 33 4. CONCLUSION AND RECOMMENDATION...

Words: 13332 - Pages: 54

Premium Essay

Risk Management

...Structure for an IT Risk Management Plan Course Name and Number: _____________________________________________________ Student Name: ________________________________________________________________ Instructor Name: ______________________________________________________________ Lab Due Date: ________________________________________________________________ Overview In this lab, you defined the purpose of an IT risk management plan, you defined the scope for an IT risk management plan that encompasses the seven domains of a typical IT infrastructure, you related the risks, threats, and vulnerabilities to the plan, and you created an IT risk management plan outline that incorporates the five major parts of an IT risk management process. Lab Assessment Questions & Answers 1. What is the goal or objective of an IT risk management plan? 2. What are the five fundamental components of an IT risk management plan? 3. Define what risk planning is. 4. What is the first step in performing risk management? 5. What is the exercise called when you are trying to gauge how significant a risk is? 25 6. What practice helps address a risk? 7. What ongoing practice helps track risk in real time? 8. True or False: Once a company completes all risk management steps (identification, assessment, response, and monitoring), the task is done. 9. Given that an IT risk management plan can be large in scope, why is it a good idea to develop a risk management plan team? 10...

Words: 434 - Pages: 2

Premium Essay

Risk Management

...Volume–VI, Number–01, January-June, 2011 Risk Management Practices: A Critical Diagnosis of Some Selected Commercial Banks in Bangladesh MD. ZAHANGIR ALAM* MD. MASUKUJJAMAN** ABSTRACT The paper is about risk management practices of commercial banks in Bangladesh based on five commercial banks operating in Bangladesh. The number of respondents was 25, five from each bank. While collecting the requisite data, five points Likert Scale has been used. The objective of the study was to critically examine risk management practices of Bangladeshi banks i.e., types of risk facing a bank, procedure and techniques used to minimize the risk etc. The study also examines how far the banks follow the guidelines of Bangladesh Bank regarding risk management. The study reveals that credit risk, market risk and operational risk are the major risks to the bankers which are managed through three layers of management system. The Board of Directors performs the responsibility of the main risk oversight, the Executive Committee monitors risk and the Audit Committee oversees all the activities of banking operations. In the context of opinions regarding use of risk management techniques, it is found that internal rating system and risk adjusted rate of return on capital are relatively more important techniques used by banks. Key Words: Risk, Risk Management, Risk Management Techniques, Banking. 1. INTRODUCTION In the past two decades, the banking industry has evolved from...

Words: 6095 - Pages: 25

Premium Essay

Risk Management

...Introduction Risk management is the process of identifying vulnerabilities and threats to information resources used by a company in reaching business objectives and deciding what measures to take in reducing risk to an acceptable level. An effectual risk management process is an essential component of a successful IT security program. The paramount goal of an organization's risk management process should be to protect the organization and its ability to perform their mission, not just its IT assets. With that in mind, the risk management process should not be treated primarily as a technical function by IT experts, but rather as an essential management function of the organization. The objective of performing risk management is to enable the organization to accomplish its mission(s) (1) by better securing the IT systems that store, process, or transmit organizational information; (2) by enabling management to make well-informed risk management decisions to justify the expenditures that are part of an IT budget; and (3) by assisting management in authorizing (or accrediting) the IT systems on the basis of the supporting documentation resulting from the performance of risk management . “Effective risk management begins with a clear understanding of the organization's appetite for risk2. This drives all risk management efforts and impacts future investments in technology. Risk management encompasses four key elements: Risk identification, risk mitigation, risk acceptance...

Words: 3059 - Pages: 13

Premium Essay

It Risk Management

...Information Technology Risk Management Risk management is the continuing method to recognize, examine, appraise, and treat loss exposures and monitor risk control and financial resources to diminish the adverse effects of loss (Marquette). Every company has a goal. In this internet age, as companies use computerized information technology systems to manage their data for better support of their goals, risk management plays a crucial role in defending a company’s information technology‘s resources and its goals from information technology’s risk. A successful risk management method is an important component of an effective information technology security program. The primary goal of a companies risk management method should be to protect the company and its ability to accomplish their task, not just its information technology’s assets. Therefore, the risk management method should not be treated primarily as a technical function carried out by the information technology professionals who control and administer the information technology system, but as a necessary management function of the company (Stonebrner). Risk management is the method that allows information technology supervisors to assess the operational and economic expenses of protective measures and achieve gains in operational capability by keeping the information technology systems and records that support their company’s goals. This method is not unique to the information technology environment; indeed it...

Words: 1274 - Pages: 6

Premium Essay

Risk Management

...construction is the a major and any productivity enhancement activity in this sector will have a positive impact in overall improvement of the national economy. The Nepalese construction industry is still regarded as in infant stage, can play a vital role to uplift the economic and socio status of local people by developing such infrastructures. In addition there are many risks faced by the construction industry in order to achieve its aim. 1.2. Objective of the study The major objective of this report writing is to understand various risk faced by an industry or an organizations and their ways and techniques to handle all these risk. But apart from that the other objectives of this study are: 1. To understand different types of risk facing organization. 2. To understand the trend of risk analysis in Nepalese construction market. 3. To know the techniques used to manage loss exposure unit 4. To find out the problem faced while managing risk 5. To know what methods are usually followed to reduce risks in construction companies? 6. To know benefits and significance of risk management 1.3. Research methodology There are many methods of collecting data. For the purpose of preparation of this report, direct interviews with respondents were taken and questionnaires were prepared. However secondary sources of data like annual general report and other journals...

Words: 2406 - Pages: 10

Premium Essay

Risk Management

...Manage risk Every business faces risks that could present threats to its success. Risk is defined as the probability of an event and its consequences. Risk management is the practice of using processes, methods and tools for managing these risks. Risk management focuses on identifying what could go wrong, evaluating which risks should be dealt with and implementing strategies to deal with those risks. Businesses that have identified the risks will be better prepared and have a more cost-effective way of dealing with them. This guide sets out how to identify the risks your business may face. It also looks at how to implement an effective risk management policy and program which can increase your business' chances of success and reduce the possibility of failure. * The risk management process * The types of risk your business faces * Strategic and compliance risks * Financial and operational risks * How to evaluate risks * Use preventative measures for business continuity * How to manage risks * Choose the right insurance to protect against losses The risk management process Businesses face many risks, therefore risk management should be a central part of any business' strategic management. Risk management helps you to identify and address the risks facing your business and in doing so increase the likelihood of successfully achieving your businesses objectives. A risk management process involves: * methodically identifying the risks surrounding your business...

Words: 3682 - Pages: 15

Free Essay

Risk Management

...Risk management in the health care in the past risk management and quality improvement job was separate in the health care organization. Even though, the job function may have been different the goal was the same. As up today they have close the gap to provide a better, and safety quality patient care. Rationale What is risk management any way not everyone has the same meaning. It can be define as such Risk management is a process for identifying, assessing, and prioritizing risks of different kinds. Once the risks are identified, the risk manager will create a plan to minimize or eliminate the impact of negative events. A variety of strategies is available, depending on the type of risk and the type of business. Outline Risk Management and Patient Safety: The Synergy and the Tension Integrating Risk Management, Quality Management, and Patient Safety into the Organization Benchmarking in Risk Management Risk Management Strategic Planning for a Changing Health Care Delivery System Using Never Events to Reduce Risk and Advance Patient Safety Governance and Board Responsibility to Assure Safety in Health Care Organizations 1. Introduction What is the goal or the idea behind risk management one of their focus is to reduce the financial risk other areas that may seem not important is the regulation. One of the principal issues facing health care risk management is governmental regulation. Over the last few decades, there has been a growing public...

Words: 4978 - Pages: 20

Premium Essay

Risk Management

...RISK MANAGEMENT FOR COLLABORATIVE SOFTWARE DEVELOPMENT MOJGAN MOHTASHAMI is a Ph.D. candidate at the School of Management of Rutgers University and a lecturer at New Jersey Institute of Technology (NJIT). She can be reached at mojgan@oak.njit.edu. THOMAS MARLOWE is a professor of mathematics and computer science at Seton Hall University. He received Ph.D.s from Rutgers in 1975 and 1989. VASSILKA KIROVA received a Ph.D. in computer science from NJIT. Her areas of interest include specification and software productivity and quality. She can be reached at kirova@bell-labs.com. FADI P. DEEK is professor and dean of the College of Science and Liberal Arts at NJIT. His research interests include software engineering and learning systems. Mojgan Mohtashami, Thomas Marlowe, Vassilka Kirova, and Fadi P. Deek Collaborative software development involving multiple organizational units, often spanning national, language, and cultural boundaries, raises new challenges and risks that can derail software development projects even when traditional risk factors are being controlled. This article presents a framework that can be used to manage collaborative software development projects, based on an extended set of risk management principles. Three risk factors — trust, culture, and collaborative communication — are discussed in depth. OLLABORATIVE SOFTWARE DEVELOPment (CSD) entails multiple teams, working for multiple organizational units within the same or different companies, and no clear...

Words: 6555 - Pages: 27

Premium Essay

Risk Management

...Risk management In this section a summarized position of various risks facing DBBL while conducting its business and operations and steps taken by the Bank to effectively manage and mitigate such risks are discussed. RISK MANAGEMENT FRAMEWORK Risk is defined by DBBL as risk of potential losses or foregone profits that can be triggered by internal and external factors. Therefore, the objectives of risk management are identification of potential risks in our operations and transactions, in our assets, liabilities, income, cost and off-balance sheet exposures and independent measurement and assessment of such risks and taking timely and adequate measures to manage and mitigate such risks within a risk-return framework. In DBBL, only calculated risks are taken while conducting banking business to strike a balance between risk and return. Risk is clearly identified, mitigated or minimized and if possible eliminated to protect capital and to maximize value for shareholders. It is also ensured that on-balance sheet and off-balance sheet risks taken by the Bank are consistent with risk appetite and short term as well as long term strategic objectives of the Bank. A wide range of tools and techniques are used to address & mitigate all kinds of inherent and potential risks in banking operations. The Bank attaches highest priority to establish, maintain and upgrade risk management infrastructure, systems and procedures. In this regard, sufficient resources are allocated to improve...

Words: 2576 - Pages: 11

Premium Essay

Management of Risk

...RISK MANAGEMENT – AN AREA OF KNOWLEDGE FOR ALL ENGINEERS A Discussion Paper By: Paul R. Amyotte, P.Eng.1 & Douglas J. McCutcheon, P.Eng.2 Chemical Engineering Program Department of Process Engineering & Applied Science Dalhousie University Halifax, Nova Scotia, Canada B3J 2X4 2 1 Industrial Safety & Loss Management Program Faculty of Engineering University of Alberta Edmonton, Alberta, Canada T6G 2G6 Prepared For: The Research Committee of the Canadian Council of Professional Engineers October 2006 SUMMARY The purpose of this paper is to “seed” the discussion by the Research Committee of the Canadian Council of Professional Engineers (CCPE) on the topic of risk management. The paper is in part a research paper and in its entirety a position paper. As can be inferred from the title, the authors hold the firm opinion that risk management is an area of knowledge with which all engineers should have familiarity and a level of competence according to their scope of practice. The paper first makes the distinction between hazard and risk. The two terms are often used interchangeably when in fact they are quite different. A hazard is a chemical or physical condition that has the potential to cause harm or damage to people, environment, assets or production. Risk, on the other hand, is the possibility or chance of harm arising from a hazard; risk is a function of probability and severity of consequences. A description of the process of risk management is then given....

Words: 14427 - Pages: 58

Premium Essay

Risk Management

...Running Head: RISK MANAGEMENT Risk Management Jennifer Sprague HCS 451- Health Care Quality Management and Outcomes Analysis May 16, 2011 Isamel Caicedo When looking at organizations and the risks that they have to manage on a daily basis, we see where policies, procedures, and outcomes come into play. Though risks are different and challenge organizations in different ways, there are steps that every organization should take to identify and manage their risks. These risks that organizations take affect not only the organization but the stakeholders as well. There are types of education, training, and/or policies that help the hospital to mitigate risks within the organization. Through the risks that organizations take, the purpose of the risk management team shines through to prove that these organizations can compete with others and rise above other organizations. The main purpose of risk management in the health care organizations are described in Chapter 1 of the Risk Management Handbook stating, “… health care risk management has moved from a discipline focused almost exclusively on medical professional liability issues to a profession concerned with all risks associate with accidental losses facing a health care organization,” (Carroll, 2009). This statement shows the health care organizations not only are trying to protect their company as a whole, but everyone and everything involved. In the hospital setting, “providers have come to realize...

Words: 1231 - Pages: 5

Premium Essay

Risk Management

...Risk Management: Over the past decade, risk and uncertainty have increasingly become major issues which impact business activities. Many organizations are raising awareness to minimize the adverse consequences by implementing the process of Risk Management Framework which plays a significant role in mitigating almost all categories of risks. According to Ward (2005), the objective of risk management is to enhance a company’s performance. In particular, the importance of the framework is to assist top management in developing a sensible risk management strategy and program. In an effort to effectively use the risk management process frameworks, it is important to differentiate between risk and uncertainty. There is a tendency to claim that the process of the COSO framework and SHAMPU framework are more appropriate to further explain and deal with the issues of uncertainty and risk. This essay will first define risk and uncertainty. In the second section, it will introduce the process of two frameworks namely the COSO framework and the SHAMPU framework. It will evaluate the performance of the two different alternative risk management frameworks to distinguish different between risk and uncertainty. Finally, an opinion will be expressed if the effective use of risk management process frameworks depends upon an ability to differentiate between risk and uncertainty. Ward (2005) points out that different people have different viewpoints about risks and uncertainties. Some...

Words: 2006 - Pages: 9

Premium Essay

Risk Management

...Q 1: Advantage: 1. Risk identification: If all the risks have been identified at the beginning of a business project, the outcome and the solution of the risks can be considered before start and reduce potential lost. 2. Reduce compliance costs: The unprofitable part of the business can be eliminated or outsourced after risk analysis so that the risk is transferred. Reducing the areas of responsible business will allow the company to devote resources to the most profitable parts and eliminate the risks that were associated with those abandoned segments. 3. Enhance quality of product or service: The chance of emergency cases have been reduced so that the quality of product or service can be ensured at a certain level. 4. Increase efficiency and productivity: All risks have been figured out so that staff can be easily to distributed at suitable position and thus increase the efficiency. The productivity will be strengthened by practical division of labour and specification. 5. Improve relationships communication with stakeholders: Each identified risk can be discussed among various stakeholders to eliminate or minimize the risks assessed. This brings the various views onto the table and in the process of finalizing potential solutions as all stakeholders (including clients, employees, suppliers and contractors, etc.)are involved. 6. Enhance business planning and achievement of objectives and goals: Each risk is described along with its attributes such as...

Words: 690 - Pages: 3

Premium Essay

Risk Management

...Paula Abadía Risk management Companies in every part of the world are exposed to many different threats and unexpected things; these are called risks. Risks can be any factor affecting the performance of projects, and causing a negative effect on them. In order for companies to be successful, they should always take into consideration the process of risk management. Risk management is a logical process or approach that seeks to eliminate, or at least minimize the level of risk associated with a business operation. It ensures that an organization identifies and understands the risks to which it is exposed. This process also guarantees the creation and implementation of effective plans, to prevent losses or reduce the impact if a loss occurs. Risk management has five main steps. First, identify and analyze exposures. Companies need to asses not only key risk areas, but also every single risk area that can harm their business. Along with this step of identification and analysis, the likelihood and impact of the risks should be measured. Companies should rank risks in order of importance, before moving to the next step. The second step is examining risk management techniques. In this step, companies must develop all the possible options that can help to manage risks successfully. The third step is the selection of the risk management technique. The chosen technique must be based on the previous analysis that the company should have done, so that it is the best alternative for...

Words: 979 - Pages: 4