You%20are%20an%20AI%20assistant.%20Information%20will%20be%20provided%20to%20help%20answer%20the%20user's%20question.%20USE%20ONLY%20THE%20REFERENCE%20INFORMATION%20PROVIDED%20TO%20ANSWER%20THE%20QUESTION.%20Be%20very%20specific%20in%20your%20answer%20and%20focus%20only%20on%20the%20question.%20Do%20not%20reference%20the%20material%20provided%20in%20your%20response.%0AUser%20question:%20Risk%0AReference%20information:%20%0A%23%23%23%0A7.2.3%20Positive%20Risk%20%20%0AOverview%20(7.2.3.P1)%20%20%0ARisks%20are%20future%20events%20or%20conditions%20that%20have%20some%20probability%20of%20occurring%20and%20some%20impact%20to%20your%20project.%20You%20usually%20always%20think%20of%20risks%20as%20being%20bad%20and%20you%20put%20a%20plan%20in%20place%20to%20make%20sure%20the%20risk%20goes%20away.%20%20%0AHowever,%20is%20it%20true%20that%20all%20risks%20are%20bad%3F%20Let%E2%80%99s%20say%20your%20project%20was%20going%20to%20utilize%20a%20new%20tool%20or%20new%20technology.%20Would%20it%20make%20sense%20that%20your%20project%20was%20riskier%20than%20a%20similar%20project%20that%20is%20using%20current%20technology%3F%20%20%0AOn%20the%20surface%20this%20would%20seem%20to%20be%20correct.%20Your%20team%20probably%20understands%20the%20current%20technology%20better,%20the%20current%20technology%20is%20probably%20more%20stable%20and%20you%20probably%20have%20a%20lot%20more%20support%20infrastructure.%20The%20new%20technology%20is%20not%20understood%20as%20well,%20has%20more%20opportunity%20for%20problems%20and%20you%20don%E2%80%99t%20have%20nearly%20as%20solid%20of%20a%20support%20infrastructure%20in%20case%20something%20goes%20wrong.%20%20%0AIf%20it%20is%20true%20that%20all%20projects%20are%20generally%20more%20risky%20when%20you%20use%20new%20technology,%20why%20would%20you%20ever%20undertake%20a%20project%20with%20new%20technology%3F%20The%20answer%20is%20that%20you%20perceive%20there%20to%20be%20a%20benefit%20to%20your%20project.%20In%20other%20words,%20the%20potential%20impact%20to%20your%20project%20is%20a%20positive.%20This%20still%20meets%20the%20definition%20of%20risk.%0AThis%20decision%20tree%20shows%20two%20risks.%20Risk%20A%20has%20two%20outcomes.%20Outcome%201%20is%2020%25%20likely%20to%20occur%20and%20outcome%202%20is%2080%25%20likely%20to%20occur.%20The%20monetary%20value%20of%20Risk%20A%20is%20$10,000.%20If%20outcome%20A%20occurs,%20a%20second%20Risk%20B%20is%20introduced%20and%20there%20are%20three%20likely%20outcomes,%201.1,%201.2%20and%201.3.%20The%20monetary%20value%20of%20Risk%20B%20is%20$30,000.%20Using%20the%20decision%20tree,%20you%20see%20that%20the%20financial%20risks%20of%20the%20various%20outcomes%20are%20as%20follows:%20%20%0A1.1%20%20%0A$9,500%20%20%0A($10,000%20*%20.2)%20+%20($30,000%20*%20.25)%20%20%0A1.2%20%20%0A$23,000%20%20%0A($10,000%20*%20.2)%20+%20($30,000%20*%20.70)%20%20%0A1.3%20%20%0A$3,500%20%20%0A($10,000%20*%20.2)%20+%20($30,000%20*%20.05).%20%20%0A2%20%20%0A$8,000%20%20%0A($10,000%20*%20.8)%20%20%0AYour%20objective%20may%20still%20be%20to%20mitigate%20Risk%20A%20so%20that%20it%20does%20not%20occur.%20However%20if%20you%20are%20not%20able%20to%20successfully%20mitigate%20the%20risk,%20this%20analysis%20show%20you%20that%20you%20should%20try%20to%20achieve%20outcome%201.3%20if%20possible.%20It%20has%20the%20smallest%20risk%20impact.%20If%20you%20don%E2%80%99t%20think%20you%20can%20achieve%20outcome%201.3,%20you%20should%20try%20for%20outcome%202.%20Even%20though%20the%20risk%20implication%20of%20outcome%202%20is%20much%20larger%20than%20the%20risk%20implication%20of%20outcome%201,%20there%20is%20a%20second%20risk%20associated%20with%20outcome%201%20and%20that%20Risk%20B%20has%20a%2095%25%20probability%20of%20pushing%20the%20total%20risk%20value%20higher%20still.%20%20%0ACreate%20a%20Risk%20Breakdown%20Structure%20(RBS)%20to%20Identify%20Risks%20(7.2.P10)%20%20%0AThere%20are%20a%20number%20of%20ways%20to%20identify%20risks%20on%20your%20project.%20One%20technique%20is%20through%20a%20Risk%20Breakdown%20Structure%20(RBS).%20The%20concept%20is%20similar%20to%20a%20Work%20Breakdown%20Structure%20(WBS)%20except%20instead%20of%20breaking%20work%20down%20into%20smaller%20pieces;%20the%20structure%20is%20used%20to%20break%20risks%20down%20from%20general%20to%20more%20specific.%20For%20example,%20you%20might%20identify%20three%20general%20risk%20categories%20on%20your%20project%E2%80%93technology,%20culture%20and%20vendor.%20Then%20you%20would%20look%20for%20more%20specific%20risks%20within%20each%20category.%20The%20resulting%20structure%20might%20look%20like%20this.%20%20%0ATechnology%20%20%0ACulture%20%20%0AVendor%0A%0A%20-%20new%20in%20market%0A-%20we%20are%20not%20good%20at%20culture%20change%0A-%20new%20vendor%20along%20with%20new%20technology%0A-%20we%20have%20not%20used%20before%0A-%20most%20staff%20will%20be%20initially%20negative%0A-%20vendor%20is%20small%20and%20not%20sure%20of%20stability%0A-%20tendency%20to%20break%0A-%20management%20support%20is%20unclear%0A-%20not%20sure%20about%20ability%20to%20scale%20up%20to%20our%20needs%0A-%20testing%20with%20beta%20release%0AUnderstand%20the%20Risk%20Tolerance%20Level%20in%20Your%20Organization%20(7.2.P8)%20%20%0ADuring%20the%20risk%20identification%20process,%20you%20may%20encounter%20risks%20that%20have%20a%20marginal%20impact%20to%20the%20project.%20The%20question%20is%20whether%20the%20risk%20has%20enough%20impact%20on%20the%20project%20to%20worry%20about.%20The%20answer%20says%20something%20about%20your%20risk%20tolerance.%20During%20risk%20planning%20you%20need%20to%20determine%20your%20tolerance%20level%20for%20risks.%20This%20will%20help%20you%20focus%20on%20the%20risks%20that%20are%20important%20and%20above%20your%20tolerance%20level,%20while%20ignoring%20risks%20where%20the%20impact%20falls%20below%20the%20tolerance%20level.%20%20%0ARisk%20tolerance%20can%20also%20be%20cultural%20in%20your%20organization.%20Some%20organizations%20are%20bigger%20risk-takers%20and%20will%20accept%20a%20higher%20level%20of%20risk%20on%20projects.%20They%20will%20also%20tend%20to%20have%20a%20higher%20threshold%20before%20they%20chose%20to%20manage%20a%20risk.%20%20%0AOn%20the%20other%20hand,%20some%20organizations%20are%20more%20risk-averse.%20They%20will%20tend%20to%20accept%20less%20risky%20projects%20and%20they%20will%20also%20tend%20to%20have%20a%20lower%20threshold%20to%20manage%20risks.%20%20%0AUse%20Decision%20Trees%20to%20Analyze%20Multiple,%20Related%20Risks%20(7.2.P9)%20%20%0AOne%20way%20to%20calculate%20the%20financial%20results%20of%20an%20interdependency%20of%20risk%20on%20a%20project%20is%20to%20use%20a%20decision%20tree.%20A%20decision%20tree%20is%20a%20technique%20for%20determining%20the%20overall%20risk%20associated%20with%20a%20series%20of%20related%20risks.%20Decision%20trees%20are%20a%20good%20technique%20when%20you%20have%20the%20following%20characteristics:%0A-%20Risk%20probabilities%20of%20one%20risk%20are%20based%20on%20the%20results%20of%20a%20prior%20risk.%20That%20is,%20the%20risks%20are%20related.%0A-%20There%20are%20a%20small%20number%20of%20probable%20results%20for%20each%20decision%20point%E2%80%93not%20a%20large%20number.%20If%20there%20are%20a%20large%20number%20of%20potential%20outcomes,%20this%20technique%20can%20be%20very%20complex.%20%20%0A-%20There%20are%20quantitative%20implications%20of%20the%20risk%20calculations.%20%20%0ALook%20at%20the%20following%20decision%20tree%20example.%0A-%20There%20is%20an%20impact%20to%20your%20project.%20Normally%20risk%20events%20have%20a%20negative%20impact%20on%20your%20project.%20However,%20with%20positive%20risk%20there%20is%20a%20potential%20positive%20impact.%0A-%20There%20is%20a%20probability%20of%20the%20event%20occurring.%20This%20is%20still%20the%20case%20with%20positive%20risks.%20In%20the%20prior%20example,%20if%20the%20benefits%20of%20moving%20to%20new%20technology%20were%20guaranteed,%20you%20could%20make%20the%20decision%20to%20move%20forward%20with%20100%25%20confidence.%20However,%20usually%20the%20benefits%20are%20not%20guaranteed.%20The%20technology,%20or%20the%20implementation%20of%20the%20technology,%20could%20turn%20out%20bad,%20in%20which%20case%20you%20might%20be%20worse%20off%20than%20when%20you%20started.%20%20%0APositive%20risk%20is%20also%20called%20%E2%80%9Copportunity%20risk%E2%80%9D.%20One%20of%20the%20key%20aspects%20of%20positive%20risk%20is%20that%20you%20put%20yourself%20in%20a%20position%20to%20take%20on%20the%20risks.%20Negative%20risks%20are%20potential%20events%20that%20can%20happen%20to%20you.%20They%20are%20the%20ones%20that%20you%20want%20to%20minimize.%20Positive%20risks%20are%20those%20that%20you%20knowingly%20take%20upon%20yourself%20since%20you%20perceive%20there%20to%20be%20benefits%20to%20do%20so.%20%20%0ADifferent%20organizations%20have%20different%20tolerances%20for%20risk.%20If%20you%20take%20an%20intelligent%20risk%20and%20you%20fail,%20what%20happens%3F%20If%20your%20organization%20rewards%20people%20that%20take%20risks%20and%20are%20successful,%20and%20they%20punish%20people%20that%20take%20risks%20and%20fail,%20then%20they%20are%20really%20risk%20averse.%20It%20is%20easy%20to%20reward%20the%20people%20that%20take%20risks%20and%20succeed.%20It%20is%20the%20situation%20of%20the%20risk-taker%20that%20fails%20that%20determines%20whether%20your%20organization%20is%20really%20risk%20averse%20or%20risk%20tolerant.%20%20%0AGenerally%20when%20you%20are%20doing%20risk%20management%20on%20projects%20you%20are%20talking%20about%20potential%20negative%20events.%20However,%20you%20can%20also%20identify%20the%20risk%20events%20that%20lead%20to%20positive%20outcomes.%20These%20opportunity%20risks%20can%20be%20managed%20the%20same%20way%20as%20negative%20risks%20except%20that%20instead%20of%20eliminating%20the%20risks,%20your%20risk%20plan%20will%20include%20activities%20designed%20to%20give%20you%20the%20best%20chance%20that%20the%20risk%20event%20will%20come%20true.%0A%0A7.3%20Manage%20Risk%20/%20Quick%20Reference%20%20%0ATemplates:%20(7.3.P1)%20%20%0AThe%20following%20templates%20are%20available%20in%20the%20TenStep%20Template%20Libraries%20to%20support%20this%20process.%0AEach%20high-level%20category%20is%20broken%20down%20into%20more%20detailed%20risks.%20It%20is%20possible%20that%20some%20of%20these%20risks%20can%20be%20broken%20down%20into%20more%20granular%20risks%20as%20well.%20At%20this%20point%20you%20are%20still%20in%20risk%20identification.%20As%20you%20move%20risks%20through%20the%20risk%20management%20process,%20you%20will%20need%20to%20state%20the%20true%20risk%20with%20more%20precision.%20%20%0AConsider%20Very%20High-Probability%20Risks%20to%20be%20Constraints%20(7.2.P11)%20%20%0ARisks%20have%20some%20probability%20of%20occurrence.%20Constraints%20are%20facts%20and%20have%20a%20100%25%20chance%20of%20occurring.%20You%20can%20try%20to%20manage%20risks.%20Constraints%20should%20be%20managed%20around.%20%20%0AIt%20makes%20sense%20to%20consider%20very%20high-probability%20risks%20being%20constraints%20as%20well.%20For%20example,%20if%20you%20think%20that%20a%20risk%20has%20a%2099%25%20chance%20of%20occurring,%20it%20probably%20makes%20sense%20to%20just%20consider%20it%20as%20a%20fact%20(100%25)%20and%20manage%20it%20as%20a%20constraint.%20This%20might%20be%20more%20effective%20than%20trying%20to%20manage%20this%20as%20a%20risk%20since%20it%20is%20almost%20certainly%20likely%20to%20come%20to%20fruition.%20In%20fact,%20if%20a%20risk%20is%2090%25%20probable%20it%20is%20a%20good%20candidate%20to%20considered%20a%20constraint.%20%20%0ATo%20generalize%20this%20concept,%20you%20might%20consider%20any%20risk%20that%20has%20a%20%E2%80%9Cvery%20high%E2%80%9D%20probability%20of%20occurring%20to%20be%20a%20constraint.%20This%20could%20be%20numerically%20formalized%20to%20include%20any%20risk%20that%20has%20an%2080%25%20or%20higher%20chance%20of%20occurring.%0A%23%23%23