A Guide to Risk Management in Construction Projects

Developed by Jokin Brito

Abstract

Throughout history, construction has been one of the most revenue generating industries in the world and like many other businesses, is being transformed to meet the highest demands of the twenty-first century. Only in the United States, more than 11.1 million people were employed by the construction industry in 2018, the industry spending topped $1.23 trillion in 2017 and it accounted for between 7% of total U.S. GDP. Furthermore, today's construction industry involves more dynamic and uncertain planning than ever before. Decision-makers and project managers require better knowledge and systematic tools, not only in project management, but also in risk management, a discipline that has a special complexity in construction projects. This article has the goal of giving project managers and decision-makers within construction industry a more detailed guide to fulfill the needs of any projet they manage, where they can identify and reduce cost and time over-runs and security risks, in order to optimize the chances of project success. The guide follows the Project Management Institute (PMI) standards in the PMBOK® Guide.

Background

Construction Industry

The size of construction projects has outgrowed the industry's capacity to manage complex problems under conditions of uncertainty. Risk management in large scale projects becomes a more important part of overall construction management. Each project is very different from each other and they can't be managed in a systematic way, such as in other industries, thus risk management has always been a more trial-and-error method, which requires symbolic reasoning. Empirical knowledge plays a major role for decision-makers and project managers in every stage under uncertainty and many problems in the industry are not very well defined so the risks that this problems entail are much more difficult to define.

In this article the focus is on giving a more systematic way of evaluating and defining risks on any construction project, helping project managers to base their decisions on the standars in the PMBOK® Guide and in the experience of previous projects.

Figure 1: Project Risk Management Overview .

Project Risk Management

Project Risk management includes the processes of conducting risk management planning, identification, analysis, response planning, response implementation, and monitoring risk on a project. The objectives of project risk management are to increase the probability and/or impact of positive risks and to decrease the probability and/or impact of negative risks, in order to optimize the chances of project success..]]

The Project Risk Management processes according to the PMBOK® Guide are:

1. Plan Risk Management
2. Identify Risks
3. Perform Qualitative Risk Analysis
4. Perform Quantitative Risk Analysis
5. Plan Risk Responses
6. Implement Risk Responses
7. Monitor Risks

The goal of this article is to provide guidance on each one of this processes, applied to any construcion project.

Key Concepts

All projects have a difficulty degree and a risky level that aim to deliver benefits and achieve certain goals. Even though this barely happens in the construction industry, organizations should always choose to make decisions in a controlled manner, balancing cost and benefit. When risks of any project are not well managed, they have the potential to deviate the project from the original plan and fail to achieve the defined objectives.

In every project, risks exist at two levels:

• Individual project risk Uncertain event or condition that, if occurs, has an effect on one or more project objectives. When these risks are unmanaged, it may result in problems such as delay, cost overruns, performance shortfall or loss of reputation. Opportunities that are captured can lead to benefits in the same categories.
• Overall project risk Uncertainty of the project as a whole, representing the exposure of stakeholders to the implications of variations in project outcome, both positive and negative. A good management of these risks, aims to keep project risk exposure within an acceptable range, maximizing the probability of achieving overall project objectives.

The aim of project risk management is to ensure that all types of risk are considered and that projects risks are understood in a wider context. Trends and ememerging practices for Project Risk Management include but are not limited to:

• Non-event risk: The two types of non-event risks are variability risk, where uncertainty exists about some key characteristics of a planned event or activity or decision. And ambiguity risks, where uncertainty exists about what might happen in the future.

• Project resilience: These emergent risks are better known as unknowable-unknowns and they can be tackled through developing project resilience. This requires each project to have an specific risk budget for known risks, flexible project processes that can cope while maintaining overall direction of the project, empowered project team that is trusted to get the job done with agreed-upon limits, frequent review of early warning signs and clear input from stakeholders to clarify areas where the project scope or strategy can be adjusted in response to emergent risks.

• Integrated risk management: Projects may be part of a program or portfolio, where risks also exist and should be owned and managed at the appropiate level. Some risks can be managed by the project team or manager but some risks may escalete to a higher level. A coordinated approach to enterprise-wide risk management ensures alignment and coherence in the way risk is managed across all levels.

Each project is unique and it is necessary to tailor the way Project Risk Management processes are applied. These considerations include project size, project complexity, project importance and development approach.