Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Risk

Lee Reilly
January 20, 2012
450

 Risk

Risk Management isn't rocket science

Lee Reilly

January 20, 2012
Tweet

Transcript

  1. RISK is an uncertain event or condition that, if it

    occurs, has a positive or negative effect on a project’s objectives. Friday, January 20, 12
  2. RISK REGISTER details all identified risks, including description, category, cause,

    probability of occurring, impact(s) on objectives, proposed responses, owners, and current status. Friday, January 20, 12
  3. EXAMPLE ID Description Probability Impact 1 Tender is down 2

    3 2 GitHub passwords leaked 2 5 37 Run out of beer in the office 3 2 42 GitHubber’s laptop stolen 3 5 1337 FE disk full 2 4 ∞ Pyrot is down 1 2 Friday, January 20, 12
  4. VISUALIZATION 2 42 1337 1 ∞ 37 PROBABILITY IMPACT 1

    2 3 4 5 1 2 3 4 5 Friday, January 20, 12
  5. EXAMPLE ID Description Probability Impact 1 Tender is down 2

    3 2 GitHub passwords leaked 2 5 37 Run out of beer in the office 3 2 42 GitHubber’s laptop stolen 3 5 1337 FE disk full 3 4 ∞ Pyrot is down 1 2 Friday, January 20, 12
  6. Mitigation is the systematic reduction in the extent of exposure

    to a risk and/or the likelihood of its occurrence. Friday, January 20, 12
  7. A contingency plan is a plan devised for an exceptional

    risk which is impractical or impossible to avoid. Contingency plans are often devised by governments or businesses who want to be prepared for events which, while highly unlikely, may have catastrophic effects Friday, January 20, 12
  8. EXAMPLE 1 ID Description Probability Impact 2 GitHub passwords leaked

    2 5 Mitigation: - be careful in public places - no common/shared passwords; have more passwords like prE=aQ@64y!S - have a policy for changing passwords e.g. when a GitHubber/contractor leaves - store ‘em in a secure, central location with encryption++ Friday, January 20, 12
  9. EXAMPLE 1 Contingency: - change all the passwords - audit

    all the things - email all the customers - issue press release to all the places ID Description Probability Impact 2 GitHub wiki passwords leaked 2 5 Friday, January 20, 12
  10. EXAMPLE 2 Mitigation: - contact info written down + stuffed

    in their pockets - agree on a meeting point; to find a security/police officer if lost - wear bright-ass T-shirts - take a photo of the kid in the morning ID Description Probability Impact N Lose kid(s) at theme park 4 5 Friday, January 20, 12
  11. EXAMPLE 2 Contingency: - report to the lost babies department

    - make a bettr, fastr, strongr baby ID Description Probability Impact N Lose kid(s) at theme park 4 5 Friday, January 20, 12
  12. MORE • ID • CATEGORY • NAME • DESCRIPTION •

    STATUS • PROBABILITY OF RISK EVENT • PROBABILITY OF IMPACT • TOTAL LOSS • RISK EVENT DRIVERS • IMPACT DRIVER • IDENTIFIED BY • IDENTIFIED ON • CONTINGENCY PLANS • MITIGATION PLANS • DATE OF OCCURRENCE • PRIORITY • EXPECTED LOSS • Pe x Pi x Le = Lt Friday, January 20, 12
  13. ISO 31000:2009 - Principles and Guidelines on Implementation ISO/IEC 31010:2009

    - Risk Management - Risk Assessment Techniques ISO Guide 73:2009 - Risk Management - Vocabulary Friday, January 20, 12
  14. PESSIMISTIC PARENTS* * SRSLY - MY OPINION - YOU WON’T

    FIND THIS IN ANY LITERATURE Friday, January 20, 12
  15. WHAT DO YOU SEE? BEER ½ FULL BEER ½ EMPTY

    OPTIMIST PESSIMIST Friday, January 20, 12
  16. WHAT DO YOU SEE? BEER ½ FULL BEER ½ EMPTY

    OPTIMIST PESSIMIST A GLASS OF PISS REALIST Friday, January 20, 12