Control Your Risks or They’ll Control You

Active risk management is an essential component of managing any project.

Karl Wiegers
6 min readMay 14, 2023

--

A photo of a line of dominoes falling over and a man’s hand interrupting the cascade so the remaining dominoes do not also fall over.
Image by Freepik

A company once engaged me to determine why a major multinational software development project had failed. As I studied the project records, I discovered that the team had maintained a list of project risks — a solid project management practice. However, their monthly status reports showed only the same two minor risks each time, with a minimal estimated threat from each of them. Since the project failed, some additional risks apparently sneaked up and attacked it when no one was looking.

The project managers failed to consider some common risks on complex, distributed projects: slow decision-making, communication issues, scope changes, requirements ambiguity, overly optimistic commitments, and so forth. The outcome was a multimillion-dollar lawsuit settlement.

We can take several messages from this experience.

  • If you’ve identified only two risks for a large project, you haven’t looked closely enough.
  • If you underestimate the potential threat a risk could pose, you might not pay enough attention to it.
  • If the same items remain on your list of top risks month after month, either you’re not actively managing them or your…

--

--

Karl Wiegers

Author of 14 books, mostly on software. PhD in organic chemistry. Guitars, wine, and military history fill the voids. karlwiegers.com and processimpact.com