Fundamentals of Risk Analysis


Table of Contents


Introduction

Risk is concerned with the future
Risk is concerned with choices

For an event, action or object to be considered a risk there must be:

Risk analysis is composed of four distinct activities:

  1. Risk identification
  2. Risk projection
  3. Risk assessment
  4. Risk management


Risk Identification

Risks can be categorized as:

Natural Risks

Natural risks are those risks which are associated with normal earth processes. These processes could involve the atmosphere, oceans, earth's crust, or the biological realm. Examples include:

Man-made Risks

Some risks are entirely man-made. Examples are:

Combination Risks

These risks exist because of man's interaction or juxtaposition with nature. Some obvious examples include:

Risk Projection (Estimation)

Attempts to rate each risk in two ways:

Four risk projection activities:

Risks are weighted by perceived impact and then prioritized. Three factors affect impact:

  1. The nature of the risk indicates the problems that are likely if it occurs.
  2. The scope of a risk combines its severity with its overall distribution.
  3. The timing of a risk determines when and for how long the impact will be felt.

The importance of risk impact and probability is linked to their effect on human concerns.

	IF	risk_factor = high_impact	AND
		probability_of_occurence = low
	THEN	human_concern = low to moderate

	IF	risk_factor = high_impact	AND
		probability_of_occurence = moderate to high
	THEN	human_concern = significant

	IF	risk_factor = low_impact	AND
		probability_of_occurence = high
	THEN	human_concern = low to moderate

Risk Assessment

  • During risk assessment the following actions should be taken:
    1. Examination of the accuracy of the estimates made during risk estimation.
    2. Ranking or prioritizing the risks that have been uncovered.
    3. Examine ways to control and/or avert likely risks.

    Making A Decision Or Recommendation

    At a certain level of risk, or a combination of risks, a project will have to be terminated. Here are some guidelines:

    Any project has a single point, called the break point, at which time the decision to proceed or terminate are equally acceptable. Any risk above the break point will be too much to proceed. Of course, risk below the break point means that the project can go ahead.

    Risk Assessment Checklist