Known globally as The Risk Doctor, David has been working in risk management for about 30 years. He has worked in 48 countries on every continent except the Antarctic (too cold!), with clients in most industries.
To manage risk effectively on our projects, we need to deal with uncertainty, understand why it matters, follow a structured process, and take into account the human side that influences judgment and decisions.
The term “risk management” covers many different types of risk, including strategic risk,financial risk, reputational risk,operational risk,environmental risk, legal risk, contract risk, technical risk, as well as corporate governance, business continuity and disaster recovery. And any or all of these risks might be relevant to project risk. While each of these areas has its own special language, processes and techniques, there are some principles that apply to them all. These might be called “universal laws of risk management.”
The first law of risk management is that risk is uncertain. A risk is something in the future that might or might not occur. This is vital to a proper understanding of risk and its management. Risks do not yet exist; indeed they may never exist at all. They are potential future events or sets of circumstances or conditions. This makes them quite different from things which have happened in the past or which currently exist in the present. Past and present events can be analyzed and measured, but future events can only be imagined or estimated.