Independent Verification & Validation Program
Risk Review Template
T2006 Revision: C Effective Date: March 25, 2009
DOWNLOADED AND/OR HARD COPY UNCONTROLLED Verify that this is the correct version before use. APPROVAL SIGNATURES Gregory Blaney (original signature IMS Representative on file) DATE 03/25/2009
Rev. No. Basic A B
C
REVISION HISTORY Description of Change Author Initial Release Kurt Kehl Update Kurt Kehl Update Planning Kurt Kehl (Waterfall) Chart; update overall Risk Summary with guidance Updated Overall Risk Kurt Kehl Summary Chart text for clarity
Effective Date 01/24/2008 04/01/2008 02/10/2009
03/25/2009
Document Number IVV QM S3001
REFERENCE DOCUMENTS Document Title IV&V Quality Manual Guidelines for Risk Management
CHECK THE MASTER LIST at http://ims.ivv.nasa.gov VERIFY THAT THIS IS THE CORRECT REVISION BEFORE USE
1 of 9
Independent Verification & Validation Program
Risk Review Template
T2006 Revision: C Effective Date: March 25, 2009
Purpose and Scope of the Risk Review Template The purpose of this document is to provide a consistent method for documenting risks for Risk Board reviews, In-Progress Reviews (IPRs), and Functional Organization Council (FOC) reviews. Three templates are included in this document. The first is a general Risk Review Template for documenting risks. The second is a Risk Waterfall Chart Template for documenting Risk Mitigation Plan activities. The last is a Risk Summary Template for documenting an overview of all risks associated with a NASA IV&V Program project. The templates in this document apply to all risks documented for any NASA IV&V Program project per S3001, Guidelines for Risk Management. Risk Review Template Conventions Three different “styles” of text are used in this template: 1. [Text included in square brackets] This text represents specific information to be provided. number], [action number], or [mm/dd/yyyy]. 2. {Italic text in braces} This text is guiding or explanatory in nature. It will include tailoring guidance and descriptions of the kinds of information to be included in each section. Therefore, it should not be included in the completed risk review charts. 3. Normal Text This is standard text that should be copied verbatim into the risk review charts. It is all text that does not fit into categories (1) and (2). These conventions are implemented on the following templates. Examples are [risk
Risk Review Template, T2006, Revision C 2 of 9
Effective Date: 03/25/2009
Independent Verification & Validation Program
Risk Review Template
T2006 Revision: C Effective Date: March 25, 2009
{Page intentionally left blank. Risk Review Template begins on the following page.}
Risk Review Template, T2006, Revision C 3 of 9
Effective Date: 03/25/2009
[project name] Risk [risk number] – [Internal or External]
Risk Title
Likelihood of Occurrence
{[risk number] represented as “[x]” in Risk Matrix below}
{The title should be written to attract attention and focus on the appropriate audience. It should answer the question “So what?”} {The risk statement shall generally be written in a conditionconsequence format. For instance, given a condition, there is a possibility that a consequence will occur. The risk statement should not be equivalent to the solution. The risk statement should be written in matter-of-fact, straightforward language. Avoid the excessive use of technical terms or jargon.} {The context statement provides background on the risk and should include only facts (not assumptions). The context statement captures the background and additional information that do not appear in the risk statement. The context statement is important in that it captures the what, when, where, how, and why of the risk by describing the circumstances, causal factors, uncertainties, and related issues. When needed, cite related requirements and objectives that may be affected if the risk is realized.} {The closure criteria should document how the risk can be eliminated, or the how the likelihood of the risk can be reduced to an acceptable level. The closure criteria should be specific and measurable, and should state how the risk will be mitigated. } Rationale {Describe the consequence of the risk and why it achieved the score it did.} Likelihood [likelihood score] Rationale
7
16
20
23
25
R[x]
6 13 18 22 24
Risk Statement
4
11
15
19
21
2
8
10
14
17
Context
1
3
5
9
12
Consequence of Occurrence Date Sunrise {This is the earliest time at which the risk could occur.} {This is the latest time at which the risk could occur.} {Choose “Near”, “Mid”, or “Long” based on the sunrise date.}
Sunset
Closure Criteria
Impact Horizon
Consequence [consequence score]
{Describe the likelihood of the risk and why it achieved the score it did.}
Risk Review Template, T2006, Revision C 4 of 9
Effective Date: 03/25/2009
Independent Verification & Validation Program
Risk Review Template
T2006 Revision: C Effective Date: March 25, 2009
{Page intentionally left blank. Risk Waterfall Chart Template begins on the following page.}
Risk Review Template, T2006, Revision C 5 of 9
Effective Date: 03/25/2009
Risk Review Template, T2006, Revision C 6 of 9
Effective Date: 03/25/2009
Key Mitigation Action Planned
Goal (note risk reduction)
Additional Cost
Planned Start Date
Completion Date
Results of Action
[action number] [action title] [action number] [action title]
[goal] [goal]
[cost] [cost]
[mm/dd/yyyy] [mm/dd/yyyy]
[mm/dd/yyyy] [mm/dd/yyyy]
[result] [result]
[action number] [action title]
[action number] [action title] [action number] [action title] [action number] [action title] [action number] [action title] [action number] [action title] [action number] [action title] [action number] [action title] [action number] [action title] [action number] [action title] [action number] [action title]
[goal]
[goal] [goal] [goal] [goal] [goal] [goal] [goal] [goal] [goal] [goal]
[cost]
[cost] [cost] [cost] [cost] [cost] [cost] [cost] [cost] [cost] [cost]
[mm/dd/yyyy]
[mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy]
[mm/dd/yyyy]
[mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy] [mm/dd/yyyy]
[result]
[result] [result] [result] [result] [result] [result] [result] [result] [result] [result]
Risk Review Template, T2006, Revision C 7 of 9
Effective Date: 03/25/2009
Independent Verification & Validation Program
Risk Review Template
T2006 Revision: C Effective Date: March 25, 2009
{Page intentionally left blank. Risk Summary Template begins on the following page.}
Risk Review Template, T2006, Revision C 8 of 9
Effective Date: 03/25/2009
Overall Risk Summary
Likelihood of Occurrence
Risk Number [x] [x] [x] Risk Title
7 16 20 23
{[risk number] represented as “[x]” throughout}
R[x]
25
[internal or external][risk title] [internal or external][risk title] [internal or external][risk title]
6
13
18
22
24
4
11
15
19
21
R[x]
2 8 10 14
R[x]
17
1
3
5
9
12
Consequence of Occurrence
Note: The following portion of this template is for Services only.
External Risk Number Same as above IVV Project Score Your score using internal criteria - No more detail needed. Used to compare with DPS. Development Project Score Your score DPS criteria and communicate on 5x5 above. Review on T2006 Risk Review 16>. Comments Current status of risk submitted to POC of Development Project to include an update on risk acceptance (or not) and their mitigation plans. Communicate to IVV Program Manager on monthly basis at IPRs.
Risk Review Template, T2006, Revision C 9 of 9
Effective Date: 03/25/2009