Risk-based Learning

Developed by Gudrun Gudnadottir, February 2022

Abstract

Risk is defined as an uncertain event or condition that can have a positive or negative impact on one or more objectives. Positive risks represent opportunities, whilst negative risks represent threats. Every day we confront several kinds of risks and must make calculated decisions about how to handle them. A calculated risk is a chance made after thorough assessment of the possible consequences. We are taking a calculated risk when we act knowing that the potential reward is significantly greater than the potential loss if the activity fails. Taking a risk forces us to develop. When we stay inside the boundaries of our comfort zones, our progress slows. We need to take risks and put ourselves in circumstances we've never been in before if we want to progress. Learning from risks is one of the most essential things a person or organization can do. The more risks you take, the better you will get at avoiding them.

This issue is connected to project, program, and portfolio management because it is critical for project managers to understand the driving forces behind risk management and to be able to apply it to risk assessments. A risk may have one or more causes and, if it occurs, one or more consequences. Threats that arise are referred to as issues, and opportunities that emerge are referred to as benefits. Portfolio, program, and project managers are accountable for resolving and managing these difficulties in an efficient and effective manner.

This article begins by providing an overview of risk-based learning through an introduction to the concept of risk-based. Following that, it explores the significance of risk management. Risk-based Project Management is addressed in depth, as well as its application to detect risks. Finally, the limits of risk-based learning are emphasized.

The Big Idea: An Introduction

Portfolios, programs, and projects all have an element of uncertainty about them. Uncertainty creates risk, and risk creates uncertainty. The larger the amount of risks identified, the higher the degree of uncertainty. The capacity to recognize risks is influenced by ambiguity, which is one of the most important elements. When ambiguity is low, the amount of information available is high, allowing for the identification of risks. Uncertainty and ambiguity are variables that motivate risk management initiatives, as are assessment and open evaluation. Assessments and open evaluations enable the appropriate risk management approach to be determined and outline how risks will be managed across the portfolio, program, and project management life cycles, iterations of these life cycles, and their connections.

What is Risk-based Learning?

The definition of risk-based from the Cambridge Business English Dictionary is:

1. “Done or calculated according to how much risk is involved.”

Risk-based learning (RBL) is a type of learning environment in which the risk is the driving force behind the learning. Project risks motivate project managers to carefully analyze risks in order to reduce the probability of project failure. The more the risk involved with a project, the greater effort is required to obtain the necessary knowledge for the project to succeed. A key motivation for developing and implementing risk assessment systems is the ability to make informed decisions that reduce unnecessary risks. Risk-based learning assists in the identification, assessment, and evaluation of possible risks.

Application

What methods can managers use to minimize risks and how is risk-based learning applied in project management? First, an overview of risk management is presented, followed by information on risk-based project management. Finally, the four main factors that must be evaluated while accessing risks will be addressed.

Risk Management

Individual risks are unforeseeable events or conditions that, if they occur, have a positive or negative impact on one or more objectives. The influence of uncertainty on organizational objectives at different levels is referred to as overall risk. Risk management involves defining the strategy, analyzing risks, as well as reaction planning and implementation. Risk management is an important part of project, program, and portfolio management for all organizations. It allows organizations and teams to increase the predictability of outcomes. It is about reaching the appropriate level of organizational process maturity and the optimal level of performance. Organizations grow and develop through improving the framework for identifying risks, learning from and assessing past results, and applying what they've learned to improve the process. In order to do that complete transparency and accountability is needed.

Key success factors

Organizational, portfolio, program, and project risk management are all carried out in accordance with established procedures and rules. Figure 1 shows the key success factors for risk management.

The required uplift for each class and different risks is shown in Figure 2

The key success factors include:

• Recognizing the value of risk management. Portfolio, program, and project risk management is acknowledged as a valued discipline that offers a significant return on investment by organizational management, team members and stakeholders.

• Individual commitment/responsibility. Participants and stakeholders in the portfolio, program, and project assume responsibility for performing risk-related actions as needed. Everyone is responsible for risk management.

• Open and honest communication. It is critical not to hinder risk communication since this may limit the effectiveness of risk management. Creating a governing structure can be beneficial. Governance encourages cultural honesty and openness while requiring responsibility from every employee, operating unit, and support function.

• Organizational commitment. It is critical to establish a culture that values risk management in order to achieve this. Only when risk management is integrated with the organization's goals, values, and ERM policies can organizational commitment develop. Risk management decisions may need approval from people at a higher level than the portfolio, program, or project manager. Risk management is an integral component of the framework for portfolio, program, and project management. Risk management needs to be practiced, acknowledged, and supported within the organization. A risk management culture fosters the identification of risks rather than ignoring them, as well as the discovery of possibilities through the promotion of a positive mentality inside the organization.

• Tailoring risk effort. Risk management operations are compatible with the organization's value of the activity, as well as its level of risk, scale and other restrictions.

• Integration with organizational project management. Risk management does not operate separately from other organizational project management procedures. Distribute best practices throughout your organization. For this to happen, your organization's culture must be one of openness, with managers acting as co-dependent participants in the risk environment. Workers from the operational side of the business, as well as employees whose input is often ignored, such as the audit, finance, human resource, and risk management teams, must be included in this partnership.

Risk-based Project Management

Risk-based project management uses risk-based thinking to learn how to manage the risk and uncertainty that comes with each project. When uncertainty is decreased, if not totally removed, the project's value is preserved and predicted results are attained. It is critical to assess the effect of risks, since failure to do so may result in a loss of understanding of the overall impact on project objectives such as scope, time, cost, and quality. As a result, it is critical for each project organization to establish an effective risk management strategy. Implementing a project team culture ensures that the project progresses as planned, with the fewest unexpected events.

Evaluating risks in Project Management

There are five main factors that needs to be considered when evaluating potential risks in project management:

1. Risk Identification

The risk identification activity identifies which risks may have an impact on the project, program, or portfolio and analyzes their characteristics. Risks should be recognized and addressed as early as possible in the project. Risk identification occurs throughout the project life cycle, with a focus on major milestones. Some risks will be obvious to the project team while others will require more effort to identify, but will still be predictable. Participants in risk identification activities might include the program manager, program sponsor, program team members, risk management team, stakeholders, outside subject matter experts, customers, risk management experts and external reviewers as needed. New risks may emerge or become identified as the process develops. The frequency of iteration and the engagement of participants may vary, but the structure of the risk statements should remain similar. The identification activity should offer enough information to analyze and prioritize the risk.

Identifying risk sources and categories is one method of identifying risks. The fundamental causes that produce risks in a project or organization are referred to as risk sources. Risk sources identify potential sources of risk. Specific factors inside a project or organization that might go wrong during the preparation or execution of an activity are referred to as risk categories. It identifies locations that are vulnerable to risks. Category types include:

• External risks: Governmental, regulatory, environmental.

• Organizational risks: Service, budget, quality, resources.

• Technical risks: Risks with software, hardware, or any manuals or other process documents related to the project.

• Project management risks: How the team working on the project operates.

2. Risk Analysis

Risk analysis entails evaluating how project goals and objectives may alter as a result of the risk event's influence. Successful organizations should be able to effectively and efficiently identify the risks that have a direct impact on their goals and objectives. Once the risks have been identified, they are analyzed to determine the qualitative and quantitative impact of the risk on the project so that suitable measures may be performed. It might be difficult to identify the most significant risks. To analyze risks, it is essential to address both the probability and impact of the risks within an organization, portfolio, program and project risk management processes.

To analyze risks, the following guidelines are employed:

Probability:
Probability refers to the likelihood of a risk occurring.

Figure 1: Impact-Probability Matrix (own figure, based on )”

• High probability – (80 % ≤ x ≤ 100%)
• Medium-high probability – (60 % ≤ x < 80%)
• Medium-Low probability – (30 % ≤ x < 60%)
• Low probability (0 % < x < 30%)

Impact:
Risk analysis entails determining how the risk event's impact will affect project outcomes and objectives.

• High – Catastrophic (Rating A – 100)
• Medium – Critical (Rating B – 50)
• Low – Marginal (Rating C – 10)

3. Risk Exposure

Risk Exposure, also known as Risk Score, is calculated by multiplying the Impact Rating by the Risk Probability. The colors signify the amount of urgency in risk response planning and are used to establish reporting levels as is shown in Figure 1.

4. Risk Occurrence Timeframe

The timeframe in which this risk will have an impact is identified.

5. Risk Response Planning

Figure 2: Average quiz scores as overall scores and separated into gender. (own figure, based on )”

Study on Risk-Based Learning Games

In 2014, undergraduate students conducted a study in which they designed a risk-based learning game for students in order to explore if such learning games may increase later memory of information. Undergraduate neuroscience students led 90-minute scientific workshops for 9-10 year old students (n = 448) separated into 'Risk,' 'No Risk,' and 'Control' groups. During the workshops, 'Risk' groups were given multiple choice questions (MCQs) that required small groups of students to allocate tokens to the answer(s) they thought were right.

The group received the tokens and an equal amount back as a prize if they answered correctly, but they lost the tokens if they answered incorrectly. The group at the end of the workshop that had the most tokens won a price. MCQs without the risk component were given to the 'No risk' group, whereas no MCQs were given to the 'Control' group. At the end of the workshop, the students were given a neuroscience test based on the workshop material. Students in the 'Risk' group remembered material considerably better one week later than students in the 'No Risk' and 'Control' groups. This is reinforced by responses from students in 'Risk' classes, who stated that the 'Risk' workshops were more interesting than the 'No risk' and 'Control' workshops. These findings show that risk has a role in the classroom and can be used to interest students and motivate them to improve engagement in the classroom.

Limitations and conclusions

Annotated bibliography

1. Dikmena, I., Birgonula, M.T., Anacb, C., Tahc, J.H.M. and Aouadd, G. (2008). Learning from risks: A tool for post-project risk assessment. Automation in Construction, 18(1), 42-50.

In this paper, a learning-based approach is proposed for risk management (RM). In order to implement this approach in practice, a tool has been developed to facilitate construction of a lessons learned database that contains risk-related information and risk assessment throughout the life cycle of a project. The tool is tested on a real construction project.

2. Lavanya, N. & Malarvizhi, T. (2008). Risk analysis and management: a vital key to effective project management. Paper presented at PMI® Global Congress 2008—Asia Pacific, Sydney, New South Wales, Australia.

This conference paper describes the structured Risk Management method used by Nokia Siemens Networks to avert crisis situations and incorporate lessons learned from previous missteps. It emphasizes that effective and early risk assessment and management ensures project objectives are met, resulting in lower rework costs.

3. Rael, R. (2012). Smart Risk Management: A guide to identifying and calibrating business risks. New York, NY: American Institute of Certified Public Accountants, Inc.

This book describes organizational risk-taking and lays out a structured risk-management process. It is developed for management accountants to assist them in analyzing their position in the center of the organization. It ensures that they do not take risks that they cannot afford and that they take enough chances to remain competitive in an ever-changing industry. It lays forth six stages for effective risk management.

4. The Standard for Risk Management in Portfolios, Programs, and Projects. (2019).

A book about the practice standard for Project Risk Management. It addresses the fact that certain events or conditions may occur with impacts on project, program, and portfolio objectives. Risk Management processes allow for the consideration of events that may or may not happen by describing them in terms of likelihood of occurrence and possible impact.

References