Step

Communications & Consultation

Responsible Party

Risk Owner

Template/Guideline

Explanatory Notes

Engage key stakeholders in risk identification and risk analysis process. Keep the Portfolio and/or Project Board and other stakeholders/partners informed on RM processes at the portfolio and/or project level.

Step

Scope, Context and Criteria

Responsible Party

Portfolio Developer, Project Developer, Portfolio Manager or Project Manager

Template/Guideline

Explanatory Notes

Integrated in Programme and/or Portfolio Document, Project Document, Multi-Year Work Plan.

Step

Risk Assessment:
 
Identification of Risks

Risk Analysis

Evaluation of Risk

Responsible Party

Portfolio Developer, Project Developer, Portfolio Manager or Project Manager,

Portfolio Manager and/or Project Manager

Template/Guideline

Explanatory Notes

Assess risks during Portfolio/Project Design and as often as needed during implementation, once a year at a minimum. Track in Risk Register.

In consultation with relevant stakeholders, identify major risks for the portfolio/project objectives.

Analyze likelihood and impact of the portfolio/project risks by applying the ERM Criteria Model and record in Risk Register.

Evaluate each portfolio/project risk to determine which risks can be accepted and which risks require a priority treatment in order to meet portfolio/project objectives and avoid harm.

Step

Risk Treatment

Responsible Party

Portfolio/Project Developer or Portfolio/Project Manager

Template/Guideline

Explanatory Notes

Identify risk treatment measures in Risk Register during portfolio/project design, prior to portfolio/project approval.

During implementation, update/confirm risk treatment measures to address changes in context, new information and new risks, as necessary and based on Step 4. Implement identified risk treatment measures. Escalate/transfer the risks that meet any of the escalation conditions to the applicable line management.

Step

Risk Monitoring & Review

Responsible Party

Risk Owner

Template/Guideline

Explanatory Notes

Monitor and review risks at the frequency that is best fit for the risk and complexity of the portfolio/project. Update Risk Register once a year at a minimum.

Step

Risk Recording and Reporting

Responsible Party

Portfolio/Project Manager

Template/Guideline

Explanatory Notes

Risks are to be recorded in ERM Risk Register and risk reporting is integrated in agreed portfolio/project reporting cycle, once a year at a minimum. Portfolio/Project risks presented to the Portfolio/Project Board.