Myths help us to make sense of the uncertainty that surrounds us. In the world of business and projects, risk management performs the same role. Unfortunately there are also myths about risk management. These are often partly true, but they do not represent reality. Here are the top ten risk myths, and how to counter them.
Myth 1: All risk is bad. Risks are potential problems, and if they happen then weare in trouble. Risk includes both threats and opportunities, and both need to be managed proactively. Opportunities can save time or money, enhance performance, and help us to achieve objectives.
Myth 2: Risk management is a waste of time. Most risks are outside our control,and it is impossible to address them in advance. Instead we will deal with any issues that arise. If we deal with risk effectively, then we will not have so many issues to tackle!
Myth 3: What we do not know will not hurt us. Maybe we will be lucky and risks will not affect us. Ignorance is bliss! Risks can hurt us, our business or our projects. Avoidable problems will happen and benefits that could have been captured will be missed. Not knowing about risk can be very costly.
Myth 4: The Risk Manager manages risk. We don’t need to manage risk - we have a Risk Manager. Every member of the team should be a “risk manager”, tackling risks that affect their area of responsibility. The Risk Manager should facilitate the risk process to ensure that it is effective.
Myth 5: All risk can and should be avoided. We will do whatever it takes to ensure that risk cannot happen, no matter what cost or effort is involved. Not all threats can be avoided, and sometimes avoidance is too expensive or takes too long, so another strategy is required, such as transfer, eduction or acceptance.
Myth 6: Our business and projects are not risky. Absence of risk is a sign of success. Where risk appears, it needs to be removed as quickly as possible. Risk is built into all business and projects, linked to reward, as we take risk to create value.
Myth 7: Risk management requires numbers. Only quantitative risk analysis can reveal the true level of risk exposure. Quantitative risk analysis is powerful, but it is often not cost effective. Many risks cannot be easily quantified either, so a qualitative approach is always needed.
Myth 8: Risks are covered by existing processes. We have processes to deal with all our routine risks, so we do not need to do risk management. What about risks that we have never experienced? The risk process should identify novel risks, assess their importance, and develop targeted responses.
Myth 9: Contingency is for weak people. A strong manager meets all targets, and does not need extra time or money for things that might never happen. No-one can foresee the future and including a risk budget for known risks and contingency for unforeseen risks is a sign of wisdom not weakness.
Myth 10: Risk management does not work. The risks we identified never happened, and our responses made no difference, so we gave up. Perhaps we missed the real risks, had ineffective responses, or failed to implement agreed actions. Done properly, risk management always works!
Tackling these ten risk myths and implementing the proposed solutions will ensure that your risk management is grounded in reality, giving you the best chance of success.
To provide feedback on this Briefing Note, or for more details on how to develop effective risk management, contact the Risk Doctor
(Ez az e-mail-cím a szpemrobotok elleni védelem alatt áll. Megtekintéséhez engedélyeznie kell a JavaScript használatát.), or visit the Risk Doctor website (www.risk-doctor.com).
Don't forget! The Risk Doctor is one of the key speakers of the 4th Art of Projects Conference, which will be held on 10th of November 2016, at MOM Cultural Center. If you are interested, register here!
