<COMPANY OR PROJECT LOGO>

<PROJECT NAME>
<PROJECT REFERENCE>

RISK MANAGEMENT PLAN

VERSION <1.0>

<DD/MM/YYYY>

stakeholdermap.com
 RISK MANAGEMENT PLAN

DOCUMENT CONTROL

DOCUMENT INFORMATION

Information
Document Id [Document Management System #]

Document Owner [Owner Name]

Issue Date [Date]

Last Saved Date [Date]

File Name [Name]

DOCUMENT HISTORY

Version Issue Date Changes

[1.0] [Date] [Section, Page(s) and Text Revised]

DOCUMENT APPROVALS

Role Name © Signature Date

Project Sponsor

Project Review Group

Project Manager ©

Quality Manager

(if applicable)

stakeholdermap.com
 RISK MANAGEMENT PLAN

Procurement Manager

(if applicable)

Communications Manager

(if applicable)

Project Office Manager

(if applicable)

stakeholdermap.com
 RISK MANAGEMENT PLAN

Table of Content

<PROJECT NAME>.................................................................................................................................................................... I

<PROJECT REFERENCE>........................................................................................................................................................... I

RISK MANAGEMENT PLAN..............................................................................................................................I

Version <1.0>................................................................................................................................................................ i

<dd/mm/yyyy>................................................................................................................................................................ i

DOCUMENT CONTROL.............................................................................................................................................I
DOCUMENT INFORMATION....................................................................................................................................................... I

DOCUMENT HISTORY............................................................................................................................................................... I

DOCUMENT APPROVALS.......................................................................................................................................................... I

TEMPLATE GUIDE...................................................................................................................................................1
RISK MANAGEMENT METHODOLOGY...................................................................................................................2
THE RISK MANAGEMENT METHOD...........................................................................................................................................2

RISK IDENTIFICATION.............................................................................................................................................3
HOW RISKS WILL BE EXPRESSED.............................................................................................................................................3

RISK REPORT FORM................................................................................................................................................................4

RISK CAPTURE AND LOGGING...............................................................................................................................4

RISK ASSESSMENT METHOD..................................................................................................................................5
RISK ASSESSMENT MATRIX....................................................................................................................................6
RISK RESPONSES.....................................................................................................................................................7
TIMING AND FREQUENCY OF RISK MANAGEMENT ACTIVITIES..........................................................................7
RISK FUNDING.........................................................................................................................................................7
DOWNLOAD MORE PROJECT TEMPLATES..................................................................................................................8

stakeholdermap.com
 RISK MANAGEMENT PLAN

TEMPLATE GUIDE
How to use this template

This is a guide to the common sections included in a Risk Management Plan. Sections may be
added, removed or amended to suit your project. Example tables have been added (where relevant)
these are just a suggestion; you may decide to format these sections differently.

stakeholdermap.com
 RISK MANAGEMENT PLAN

Text in Blue italics is designed to assist you in completing the template. Delete this text before sharing
the final document.

RISK MANAGEMENT METHODOLOGY

<Describe the approach, tools and data that you will use to manage risk on this project.

An example methodology is provided below:>

THE RISK MANAGEMENT METHOD

This project will use Acme’s risk management method defined in the Acme Project Management
Methodology. It is a simple four step method which is repeated continuously through the project
lifecycle. Once a risk is identified, it is assessed, responses to manage the risk are agreed, and
progress is monitored:

1. Identify – risks are identified on an ongoing basis, through formal risk identification

workshops as well as during day to day activities.

2. Assess – once identified a risk is assessed to establish the likelihood of it occurring and the

impact it will have if it occurs.

3. Respond – there several possible actions that can be taken to reduce the likelihood of a risk

occurring or the impact of the risk, for example transferring, avoiding, and mitigating. In this

step suitable responses are agreed, and budget approved if needed.

stakeholdermap.com
 RISK MANAGEMENT PLAN

4. Monitor – progress of the risk responses needs to be monitored and controlled, with

corrective action taken if needed. Typically, progress is assessed via project team meetings.

RISK IDENTIFICATION
<Describe how risks will be identified and captured. Risks can be revealed from many sources and at
any time during the project, so risk identification needs to be an ongoing process.

An example Risk Identification process is shown below: >

The entire project team are responsible for identifying risks and reporting them to the Risk Manager.
Risks may be identified via risk workshops, but also through many other routes:

HOW RISKS WILL BE EXPRESSED

Risks will be expressed using the following simple statement:

IF xxxx assumption proves incorrect THEN xxxxx will happen

This statement ensures that the cause of the risk (the assumption) is clear, as is the impact. For
example, if you are assuming shipping will take 10 days, risk of delay could be expressed as:

stakeholdermap.com
 RISK MANAGEMENT PLAN

IF shipping takes longer than 10 days THEN the project will face a cost of $500 per day in
unused warehouse space.

RISK REPORT FORM

Identified risks can be documented on a risk form and sent to the Risk Manager for assessment.

Example risk form:

RISK REPORT FORM

Person reporting Job title Date

Risk description

Is the risk date driven? i.e. if

the risk was to occur would
be on or related to a date or
event?

Deliverables impacted

Initial assessment Impact Likelihood

Suggested risk response

(see Risk Responses)

RISK CAPTURE AND LOGGING

<Describe how risks will be captured and documented. Include the information that will be captured
along with details of who will be responsible for keeping the documentation up to date. You can
include a link to the documents that will be used and/or include a copy in an appendix.

An example is provided below:>

Risks will be captured on a risk form and submitted to the Risk Manager, who will document the risk
on the Risk Register and present it to the risk review board. The risk review board will assess the risk
and accept, reject or request more information. If the risk is accepted the board will confirm the
suggested mitigating and contingency actions and agree a budget for managing the risk.

stakeholdermap.com
 RISK MANAGEMENT PLAN

Get a Risk Register Template

RISK ASSESSMENT METHOD

<Describe how you will know which risks are the most important. Frequently risks are reviewed and
given a score or rating of likelihood and impact. In other words, is this risk likely to happen and if it did
what would it mean for the project?

An example Risk Assessment method is shown below:>

stakeholdermap.com
 RISK MANAGEMENT PLAN

Risks will be assessed by impact and likelihood using a 1 to 4 numeric scale. The combined score is
the risk priority and will drive the response to each risk.

Likelihood scale:

1 – the risk is very unlikely to happen for example it is statistically unlikely, or action has already been
taken to reduce the likelihood.

2 – the risk is unlikely to happen, but is not unheard of, for example a supplier goes unexpectedly into
liquidation or a regulatory change forces a change of materials or project approach.

3 – the risk is likely to happen for example rain in September in UK or it is a common risk on projects
of this type. For example, scope creep on IT projects.

4 – the risk is highly likely to happen, perhaps it is a common occurrence on projects or a common
issue with location, environment, materials, equipment or the technology used. For example, projects
are often impacted by staff illness.

Impact scale:

1 – the risk will have little impact, perhaps there are plans or procedures in place that will reduce the
impact, or there is a simple low-cost alternative. For example, holding a skype meeting is a key
person can’t make it to the office.

2 – the risk will have some impact, but it can be managed or reduced easily. For example, getting
cover for a non-critical staff member who is off sick or a short delay while a contingency plan is put in
place.

3 – the risk will have a significant impact. It is likely to require involvement of senior management and
trigger a re-assessment of the business case. For example, equipment failure causing a delay to the
go live date.

4 – if the risk occurs the project will no longer be viable, perhaps the business case can no longer be
achieved, the additional costs would make it ruinous or the delay would be so long as to make the
project pointless.

RISK ASSESSMENT MATRIX

<Once you have rated a risk by impact and likelihood you can use a matrix to find the
priority/importance of the risk.

An example Risk Assessment Matrix is shown below:>

Risks with a priority between 1 – 3 will be accepted (no action will be taken).

Risks with priority between 4 – 8 will be managed using the most appropriate risk response.

Priority 9, 12 and 16 risks may result in the project being cancelled or put on hold until a risk response
can be implemented that will reduce the priority to 8 or below.

RISK IMPACT

1 2 3 4
RIS

stakeholdermap.com
 RISK MANAGEMENT PLAN

1 1 2 3 4

2 2 4 6 8
K LIKELIHOOD

3 3 6 9 12

4 4 8 12 16

Other examples of risk matrices:

3 x 3 Risk Matrix

4 x 4 Risk Matrix

5 x 5 Risk Matrix

RISK RESPONSES
<Risks are often managed by reducing the likelihood of the risk happening or the impact. Other
responses are also valid such as transferring the risk, accepting the risk and avoiding the risk.
Describe the risk responses that you will use to manage risk on this project.>

How to mitigate risk

TIMING AND FREQUENCY OF RISK MANAGEMENT ACTIVITIES

<Document when risk management activities will be carried out including the frequency. Include any
risk identification workshops, risk review boards and how and when progress will be monitored.

An example is below:>
Progress will be monitored on a weekly basis. The agenda for the weekly project team member will
include space for a review of the risk register focusing on the progress of the risk responses. Risks
that are scored between 8 and 16 will be reviewed at the monthly Risk Review Board meeting chaired
by the Risk Manager.

RISK FUNDING
<Breakdown the funding/budget needed to manage risk on the project. This includes: the cost of risk
mitigation, cost for expert consultants, insurance cost, and a contingency allowance.

This section should also describe how the funding will be allocated, accessed, controlled and
measured.>

stakeholdermap.com
 RISK MANAGEMENT PLAN

DOWNLOAD MORE PROJECT TEMPLATES

Microsoft Project Plans – real world project plans in Microsoft Project.

Project Management Templates – FREE project management templates in Word and Excel

Stakeholder Management Templates

Flowcharts to download in Visio and PDF

Risk Register in Excel – download immediately

Work Breakdown Structure Excel template

Work Breakdown Structure (WBS) FREE examples to download immediately.

stakeholdermap.com