Risk management plan
A risk management plan is a document to foresee risks, estimate impacts, and define responses to risks. It also contains a risk assessment matrix. According to the Project Management Institute, a risk management plan is a "component of the project, program, or portfolio management plan that describes how risk management activities will be structured and performed".
Moreover, according to the Project Management Institute, a risk is "an uncertain event or condition that, if it occurs, has a positive or negative effect on a project's objectives". Risk is inherent with any project, and project managers should assess risks continually and develop plans to address them. The risk management plan contains an analysis of likely risks with both high and low impact, as well as mitigation strategies to help the project avoid being derailed should common problems arise. Risk management plans should be periodically reviewed by the project team to avoid having the analysis become stale and not reflective of actual potential project risks.
Risk response
Broadly, there are four potential responses to risk with numerous variations on the specific terms used to name these response options:- Avoid – Change plans to circumvent the problem;
- Control / mitigate / modify / reduce – Reduce threat impact or likelihood through intermediate steps;
- Accept / retain – Assume the chance of the negative impact, eventually budget the cost ; or
- Transfer / share – Outsource risk to a third party or parties that can manage the outcome. This is done financially through insurance contracts or hedging transactions, or operationally through outsourcing an activity.