Risk Management Plan
A. General Information
Provide basic information about the project including: Project Title – The proper name used to identify this project; Project Working Title – The working name or acronym that will be used for the project; Proponent Secretary – The Secretary to whom the proponent agency is assigned or the Secretary that is sponsoring an enterprise project; Proponent Agency – The agency that will be responsible for the management of the project; Prepared by – The person(s) preparing this document; Date/Control Number – The date the plan is finalized and the change or configuration item control number assigned. Project Title: Proponent Secretary: Prepared by: Project Working Title:
Proponent Agency: Date / Control Number:
B. Risk Management Strategy 1. Risk Identification Process
Describe the process for risk identification.
2. Risk Evaluation and Prioritization
Describe how risks are evaluated and prioritized.
1
3. Risk Mitigation Options
Describe, in general terms, the risk mitigation options.
4. Risk Plan Maintenance
Describe the methods for maintaining or updating the risk plan.
5. Risk Management Responsibilities
Identify individuals with specified risk management responsibilities.
Individual
Responsibility
2
C. Risk Analysis Summary
Using the table provided, list each risk identified, the probability of occurrence, the expected impact level, a description of the impact, and when the risk event is likely to occur.
Risk Number
Risk Name
Probability of Occurrence (Note 1)
Impact Level (Note 2)
Impact Description
Time Frame (Note 3)
Note: 1. Probability of Occurrence is the percentage of likelihood that the risk will occur. 2. Impact Level is a score of one to five. One is the least impact and five is the highest impact. 3. Provide time frames in fiscal years and quarters, if known.
3
D. Risk Response Summary
Prioritize and describe the plans for responding to each risk identified and evaluated in Section C.
Risk Priority
Risk Number
Risk Name
Responsible Person
Mitigation Action(s)
Response Trigger
4
E. Risk Mitigation Cost
Detail the estimated cost for responding to each identified risk. Based on the Risk Response Summary in Section D, identify the cost of responding to a particular risk using the most likely mitigation strategy. The total costs are used to derive the fiscal year contingency budget.
Risk Number
Risk Name
Internal Staff Labor
Services
Development Tools
Software
Hardware
Materials and Supplies
Facilities
Telecommunications
Training
Total Cost
5
F. Contingency (Risk) Budget
Calculate the Contingency Budget for each fiscal year based on the Probability of Occurrence (from Section C) and the Total Cost for mitigation (from Section E) for each risk. Use one table for each fiscal year and list all risks anticipated for that fiscal year (see Section C). Calculate the Planned Contingency Cost for each risk in the last column, by multiplying the Probability of Occurrence by the Mitigation Cost. Sum the Planned Contingency Cost for all risks anticipated in the fiscal year at the bottom of each table.
Contingency Budget for FY ______
Risk Number Risk Name Probability of Occurrence Mitigation Cost Planned Contingency Cost
Total
6
F. Contingency (Risk) Budget – continued
Contingency Budget for FY ______
Risk Number Risk Name Probability of Occurrence Mitigation Cost Planned Contingency Cost
Total
7
F. Contingency (Risk) Budget – continued
Contingency Budget for FY ______
Risk Number Risk Name Probability of Occurrence Mitigation Cost Planned Contingency Cost
Total
8
F. Contingency (Risk) Budget – continued
Contingency Budget for FY ______
Risk Number Risk Name Probability of Occurrence Mitigation Cost Planned Contingency Cost
Total
9