# A Fuzzy-Based Decision Support Model for Risk Maturity Evaluation of Construction Organizations
## 3 Research Methodology
### Identify Questions
\begin{table}
\begin{tabular}{c c l} \hline \hline
**Attributes** & **Aspects** & **Questions** \\ \hline Ability to plan risk (APR) & Standardization & Q1: Does the organization describe the concept of risk maturity and its benefits? \\  & & Q2: Does the organization define risk in terms of opportunities and threats? \\ Ability to plan risk & Standardization & Q3: Does the organization describe the concepts of risk breakdown structure and the use of it in risk planning? \\ Ability to plan risk (APR) & Q4: Does the organization have a dedicated group for risk management with defined roles, responsibilities? \\  & & Q5: Does the organization use standard documented procedures (i.e., A Guide to the Project Management Body of \\  & & Knowledge (PMROK Guide), International Organization for Standardization (ISO) 31000) for risk management processes? \\  & & Q6: Does the organization consider external risks from outside the company and internal risks from within the company? \\  & & Q7: Do the organization teams use company-wide procedures, guidelines and methods for project risk planning? \\  & & Continuous \\  & & Q8: Does the organization regularly review the risk management guidelines and methods to ensure their effectiveness? \\  & & Q9: Does the organization have a risk-aware culture communicated to staff at all levels in the organization? \\  & & Q10: Are resources continuously invested in improving the risk management tools, techniques, and professional skills of the organization? \\ \hline Ability to identify risk (AIR) & Measurement & Q1: Does the organization use the practices of brainstorming, checklists, root cause analysis, for risk identification? \\  & & Q2: Does the organization apply the concepts of risk register? \\ Ability to identify risk (AIR) & Measurement & Q3: Does the organization compare actual risks experienced against those initially identified and update its risk \\  & & identification method? \\  & & Q4: Does the organization define generic factors that give rise to risk? \\  & & Q5: Does the organization define risk factors that depend on the project delivery method and its type of contract? \\ \hline Ability to analyse risk (AAR) & Measurement & Q1: Does the organization apply the recommended practices (e.g., PMROK, ISO standards) for risk analysis? \\  & & Q2: Does the organization apply a Monte Carlo simulation for contingency estimation? \\  & & Q3: Does the organization model the uncertainty and subjectivity of input data which is used in risk analysis? \\  & & Q4: Does the organization use qualitative and/or quantitative risk analysis tools? \\  & & Q5: Does the organization consider correlation among cost items in contingency estimation? \\ \hline Ability to plan risk responses (ARR) & Measurement & Q1: Does the organization evaluate and select the best alternative from several risk response strategies using data analysis techniques? \\ \hline \hline \end{tabular}
\end{table} 
Table 4: Description of the questions. \begin{table}
\begin{tabular}{c c c} \hline \hline
**Attributes** & **Aspects** & **Questions** \\ \hline Ability to & & Q1: Does the organization assess residual risks? \\ implement risk & & Q2: Do organization team members take risk ownerships during project implementation? \\ responses & & Q3: Are responsibilities for managing risks distributed and carried out by all team members? \\ (AIRR) & & Q4: Do risk owners have sufficient authority to oversee risk-related action? \\  & & Q5: Do the organization staff fully understand the authority and responsibility of risk owners at all levels of the company? \\ \hline Ability to monitor & & Q1: Does the organization have standard project risk monitoring procedures and methods? \\ risk (AMR) & & Q2: Does the organization have standard procedures and methods for forecasting the performance of implemented \\ \hline \hline \end{tabular}
\end{table} 
Table 4: _Cont._