Day 1: Discovering and Framing Risks

Project Risk Sources

• Review scope schedule resources and contracts
• Analyze interfaces and external dependencies
• Use past lessons without generic copying
• Run identification workshop on a case

Risk Statement Construction

• Define potential cause before the event
• Describe uncertain events clearly
• Connect impact with defined project objective
• Improve weak risk statements

Applied Risk Register

• Define fields supporting decisions and follow-up
• Assign initial owner to each risk
• Record category timing and indicators
• Build an initial project risk register

Day 2: Qualitative Analysis and Prioritization

Probability and Impact Scales

• Build definitions reducing rating inconsistency
• Assess time cost and quality effects
• Apply criteria across different risks
• Manage expert discussion when judgments differ

Applied Exposure Matrix

• Combine probability and impact consistently
• Define monitor respond and escalate zones
• Avoid relying on color alone
• Classify a complete risk register

Risk Sensitivity Factors

• Use urgency, velocity, detectability as priorities
• Identify connected risks or common causes
• Detect small risks capable of accumulating
• Reprioritize using additional factors

Day 3: Deepening Analysis and Building the Exposure Profile

Risk Impact Analysis

• Estimate potential impact ranges when necessary
• Identify affected activities or milestones
• Connect risks to reserve/decision needs
• Analyze a high-risk scenario

Selecting Risks for Quantitative Analysis

• Identify decisions benefiting from numerical estimates
• Identify when qualitative analysis is sufficient
• Gather data required before modeling
• Classify risks for next analysis stage

Risk Profile Laboratory

• Present top risks and prioritization rationale
• Defend scales and assumptions used
• Revise assessment when new evidence emerges
• Approve register ready for response planning

• Identification workshops using authentic project documents
• Risk framing exercises separating cause event and impact
• Assessment matrices with predefined criteria
• Laboratory presenting the risk register to reviewers