17 Risk Management
17 Risk Management
Risk Management
Outline
1.
2.
3.
4.
5.
6.
7.
8.
9.
Introduction
Definition of Risk
Tolerance of Risk
Definition of Risk Management
Certainty, Risk, and Uncertainty
Risk Management Process
Risk Planning
Risk Assessment
Risk Identification
Outline
10. Risk Analysis
11. The Monte Carlo Process
12. Risk Handling
13. Selecting the Appropriate Response
Mechanism
14. Risk Monitoring
15. Some Implementation Considerations
16. The Use of Lessons Learned
17. Dependencies between Risks
18. The Impact of Risk Handling Measures
Basic Concept
Risk management focuses on:
Known unknowns
Proactive management
Basic Concept
The alternative to proactive
management is reactive
management, also called crisis
management. This requires
significantly more resources and
takes longer for problems to
surface.
Risk Management
Risk management focuses on the future
Risk and information are inversely related
Definition Of Risk(1/2)
Definition of Risk(2/2)
Risk
= f(Hazard, Safeguard)
Risk Types
Decision-Making Categories
Complete uncertainty
Relative uncertainty (partial information)
Complete certainty
Decision-making
under complete
uncertainty
Decision-making
under risk
Maximin Approach
Maximax Approach
Minimax regret Approach
Insufficient Reason Approach
Expected Monetary Value (EMV) Approach
Expected Opportunity Loss (EOL) Approach
Expected Value of Perfect Information (EVPI) Approach
Decision-Making under
Certainty(1/2)
A company wish to invest $50 M to
develop a new product
Three possible demand:
Strong, Even, and Low
Three ways or not to develop product
A, B, and C
Decision-Making under
Certainty(2/2)
Decision-Making under
Uncertainty (1/9)
Uncertainty:
Meaningful assignment of probabilities are not possible
Decision-Making under
Uncertainty (2/9)
Maximax (Hurwicz)
Optimistic
Choose the strategy with maximum profit
Suitable for large company
Choose S3 because maximum profit (100M) is S3
Decision-Making under
Uncertainty (3/9)
Maximin (Wald)
Decision-Making under
Uncertainty (4/9)
Minimax (Savage)
Sore loser
Minimize maximum regret
Subtract all elements in each column from the
largest element
Maximum regret is the largest regret for each
strategy
Minimize the maximum regret
Choose S2 or S2because minimize the maximum
regret from 50, 50, 140
Decision-Making under
Uncertainty (5/9)
Decision-Making under
Uncertainty (6/9)
Laplace
Transform the decision making under uncertainty
into decision making under risk
Make priori assumption based on Bayesian
statistics
Assuming the probability for each strategy is 1/3
Choose S1 because maximize the expected value
from 60, 53.3, 43.3
Decision-Making under
Uncertainty (7/9)
1/3
1/3
1/3
Decision-Making under
Uncertainty (8/9)
Decision Tree
Decision-Making under
Uncertainty (9/9)
Direction of computation
Risk handling
Risk monitoring
Performance
Risk Planning
e
m
to
s
Cu
Ac
pe
x
rE
s
n
io
t
a
ct
e
c
n
a
m
for
r
e
P
l
t ua
Time
Poor Risk
Management
Technical
Inability
Risk Assessment
The problem definition stage of risk
management
Identify and analyze program issues in
terms of probability and consequences
Risk Quantification
STAGE I
STAGE II
GUID- WARHEAD
ANCE
PROGRAM
SUMMARY
DESIGN
TEST
MANU.
COST
LEGEND
HIGH
MEDIUM
LOW
Risk Handling
Assumption (retention)
Avoidance
Control (mitigation)
Transfer
Future Risks
Inexperienced
Customers
Knowledge
Experienced
S
K
S
I
R
G
N
I
S
A
E
R
C
IN
Simple
Complex
Contract Type
R&D
Manufacturing
Marketing
Time
R&D
Information
Exchange
Manufacturing
Marketing
Time
R&D
Manufacturing
Marketing
Time
High
Risk Medium
Low
Medium
Reward
High
Re Q
so u
ur al
ce ity
s N of
ee
de
d
Low
gh
i
H
w
Lo
um
i
ed
M
Rigid
Policies/
Procedures
Avoidance
Transfer
Reduction
Assumption
Guidelines
High
Low
Prioritization of Risks
Schedule
First
(Highest)
Priority
Second
Priority
Third
Priority
Cost
Technical
Performance
or Quality
Risk Interdependencies
Interacting Risks
Product Feature A
Desirable
Specification Limit
On Characteristic B
Undesirable
Undesirable
Product Feature B
Desirable
Intensity of Controls
Extreme
Standard
Controls
Low
Low
Risk Intensity
High
Risk Controls
Schedule Length
Too
Long
Appropriate
No
Risk Plan
Too Many
Risk Management
Filters and
Gates
Low
High
Risk Controls