comprehensive project risk register development

Comprehensive Risk Register Development

Purpose

This assignment challenges you to develop a comprehensive risk register for a complex project scenario. You will demonstrate your ability to identify both threats and opportunities, analyze their characteristics, prioritize them based on qualitative assessment, and develop appropriate response strategies. This exercise builds on risk identification concepts and moves into the practical application of risk management tools and documentation.

Learning Alignment

This assignment contributes to the following outcomes:

• Program Goal: Demonstrate applied knowledge and technical expertise in the management of a single project to meet stakeholder needs within constraints.
• Course Outcome: CLO 2 - Perform qualitative risk analysis and prioritization

Scenario: Community Recreation Center Renovation Project

You have been assigned as the project manager for the renovation of the Riverside Community Recreation Center, a 30-year-old facility in a medium-sized suburban community. The city council has approved a budget of $3.2 million with an expected completion timeline of 8 months. The project must be completed before the summer season begins next year.

The recreation center serves as an important community hub and includes:

• An indoor swimming pool (which will be upgraded with new filtration systems and accessibility features)
• A gymnasium (which will receive new flooring, lighting, and basketball equipment)
• Four multipurpose rooms (which will be modernized with technology upgrades and versatile furniture)
• A fitness area (which will be expanded by 30% with new equipment)
• Community reception and administrative areas (which will be reconfigured for better flow)
• Outdoor playground and picnic area (which will be made more accessible and updated with modern equipment)

Key Project Parameters:

• The facility must remain partially operational during renovations, with different areas closing in sequence
• The project involves multiple stakeholders, including city officials, community groups, and facility staff
• The building has not had major renovations since its construction and may contain asbestos and other hazardous materials
• The renovation must comply with current ADA requirements and updated building codes
• The city has expressed interest in incorporating sustainable design elements where feasible
• The project will use a general contractor with various specialized subcontractors
• The renovation will occur duringthe fall and winter months in a region that experiences occasional heavy snowfall
• The recreation center is located in a residential area with limited parking and access routes
• Some community groups have expressed concerns about potential disruptions to their regular programs
• The project has received a special grant that requires completion by the specified deadline, or the funds must be returned.

As the project manager, you've been tasked with developing a comprehensive risk register before work begins. The city project oversight committee will review this register and will guide risk management throughout the project lifecycle.

Assignment Requirements

Create a comprehensive risk register in Microsoft Excel (.xlsx) format that includes the following components:

1. Risk Identification
   • Identify at least 14 potential risks associated with this project
   • Include at least 10 threats (negative risks) and at least 4 opportunities (positive risks)
   • Each risk must be clearly described using the "Due to [cause], [uncertain event] may occur, which would lead to [effect on objectives]" format
2. Risk Category
   • Assign each risk to exactly ONE primary impact category: Scope, Schedule, or Cost
   • Include a column that briefly explains why you selected that category as the primary impact area
3. Probability Assessment
   • Develop and clearly define a probability scale
   • Your scale must include specific, meaningful thresholds for each level (e.g., not just "Medium = 3" but defining what "Medium" actually means in terms of likelihood)
   • Assign a probability rating to each risk
   • Include a tab in your spreadsheet that defines your probability scale in detail
4. Impact Assessment
   • Develop and clearly define an impact scale for each impact category (Scope, Schedule, Cost)
   • Each impact level must have specific, meaningful thresholds that would be clear to stakeholders outside the project (e.g., not just "High = 5" but defining what "High" actually means for each category)
   • Assign an impact rating to each risk based on its primary category
   • Include a tab in your spreadsheet that defines your impact scales in detail for each category
5. Risk Prioritization
   • Prioritize each risk based on your assessment of probability and impact
   • Assign a unique priority number to each risk (1, 2, 3, etc.) with no duplicates
   • Provide a brief justification for each priority assignment
   • Define clear priority thresholds that would trigger different levels of management attention
6. Root Cause Analysis
   • Identify at least one specific root cause for each risk
   • Root causes must be detailed and specific (not generic statements like "poor planning")
   • Include a column identifying what root cause analysis technique would be most appropriate for this type of risk
7. Risk Response Strategy
   • Develop one primary response strategy for each risk
   • For threats: Select from Avoid, Transfer, Mitigate, or Accept
   • For opportunities: Select from Exploit, Share, Enhance, or Accept
   • Include detailed description of specific actions to implement the strategy
   • Explain why the selected strategy is most appropriate for this risk
   • Important Note: The "Escalate" response strategy should only be used for risks that are genuinely outside the authority of a fully empowered project manager or are far beyond what could reasonably be managed within the project (e.g., significant regulatory changes). If you select "Escalate" for any risk, provide compelling justification.
8. Risk Response Cost
   • Estimate the cost to implement each risk response strategy
   • Include any assumptions made in developing the cost estimate
9. Risk Ownership
   • Assign a specific risk owner to each risk
   • Create appropriate fictional names and roles relevant to this type of project
   • Briefly explain why this person/role is the appropriate owner
10. Risk Status
    • Assign an initial status to each risk (e.g., Identified, In Analysis, Monitoring, etc.)
    • Include a column for status updates (which would be used during project execution)
11. Additional Fields
    • Add at least two additional fields to your risk register that would be valuable for this specific project
    • Explain why these fields add value to risk management for this project

Critical Definitions and Guidelines

What IS a Project Risk: An uncertain event or condition that, if it occurs, has a positive or negative effect on one or more project objectives.

Negative Risk (Threat): An uncertain event that would have a negative impact on project objectives if it occurs.

Positive Risk (Opportunity): An uncertain event that would have a positive impact on project objectives if it occurs.

Risk Impact Categories:

• Scope Risk: Primarily impacts what is delivered by the project (features, quality, requirements)
• Schedule Risk: Primarily impacts when the project or key milestones are completed
• Cost Risk: Primarily impacts how much the project costs to complete

Threat Response Strategies:

• Avoid: Eliminate the threat by changing project plans to eliminate the risk condition
• Transfer: Shift impact and management responsibility to a third party
• Mitigate: Reduce probability and/or impact to bring the risk within acceptable thresholds
• Accept: Acknowledge the risk and decide to deal with consequences if it occurs

Opportunity Response Strategies:

• Exploit: Take specific actions to ensure the opportunity happens
• Share: Allocate ownership to a third party who can best capture the opportunity
• Enhance: Increase probability and/or positive impact
• Accept: Take advantage of the opportunity if it occurs but don't pursue it actively

Note on Risk Categorization: While risks may affect multiple aspects of a project, you must select the ONE category that represents the primary or most significant impact. This enables more focused response planning and management.

Submission Format

Your submission should include:

1. Excel Risk Register with the following tabs:
   • Risk Register: Main sheet containing all risks and required fields
   • Scale Definitions: Detailed explanation of probability and impact scales
   • Risk Matrix: A probability-impact matrix showing risk distribution
   • Additional Information: Any other relevant information to support your risk register
2. Brief Cover Document (1-2 pages) in Word or PDF format explaining:
   • Your approach to developing the risk register
   • Key assumptions made during the risk identification process
   • Explanation of your additional fields and why they add value
   • Any other considerations relevant to understanding your risk register

Submission Requirements

• Format: Microsoft Excel (.xlsx) for the risk register and Microsoft Word (.docx) or PDF for the cover document
• Risk Register Structure: Clear organization with all required fields, appropriate column widths, and readable formatting
• Cover Document Citations: APA 7th edition format for any references
• Required References:
  • PMBOK Guide (7th Edition, relevant sections on risk management)
  • At least one additional PMI standard or guide (such as the Practice Standard for Project Risk Management, The Standard for Risk Management in Portfolios, Programs, and Projects, or other relevant PMI publications)
  • At least one additional scholarly or professional source published within the last 5 years

Success Strategies

1. Begin by thoroughly analyzing the project scenario to identify potential areas of uncertainty.
2. When formulating risk statements, be specific about the cause, the uncertain event, and its potential impact.
3. Ensure your risk descriptions clearly articulate what makes each item a genuine risk (uncertainty) rather than a known issue or constraint.
4. For opportunities, think beyond just "completing early" or "under budget" to identify specific positive uncertainties that could emerge.
5. When assigning risk categories, focus on the primary impact area even if secondary impacts exist in other categories.
6. Develop detailed, specific response strategies that are feasible within the project context.
7. Ensure all costs for risk responses are reasonable and proportional to the risk's priority.
8. Assign risk owners based on who has the authority and capability to manage the specific risk.
9. Consider interdependencies between risks when developing your register.
10. For additional fields, think about what information would help you more effectively manage these specific project risks.

Rubric

Risk Register Rubric

Risk Register Rubric

Criteria	Ratings	Pts
This criterion is linked to a Learning OutcomeRisk IdentificationThis component evaluates how well students identify an appropriate number and variety of project risks, including both threats and opportunities. It assesses the clarity and completeness of risk statements using the cause-event-effect format, ensuring students understand what constitutes a genuine risk versus a constraint, issue, or assumption. The focus is on relevance to the project context, proper formulation of risk statements, and demonstration of insight into project-specific uncertainties.	20 to >18.0 ptsExemplaryIdentifies 14+ risks (including at least 10 threats and 4 opportunities) that are highly relevant to the project context. All risk statements follow the precise cause-event-effect format and clearly articulate genuine uncertainties. Demonstrates exceptional insight into project-specific risks that shows deep understanding of the scenario.18 to >16.0 ptsProficientIdentifies at least 14 risks (including 10 threats and 4 opportunities) that are relevant to the project. Most risk statements follow the cause-event-effect format and represent genuine uncertainties. Demonstrates solid understanding of project-specific risks. 16 to >14.0 ptsDevelopingIdentifies the minimum number of risks but some may lack relevance or specificity. Risk statements generally follow the required format but may have minor issues with clarity or structure. Some risks may be closer to issues or constraints than true uncertainties.14 to >0 ptsInsufficientFails to identify the minimum number of risks or presents risks that are irrelevant, improperly formulated, or not true risks. Risk statements lack proper structure or clarity. Multiple items identified as "risks" are actually issues, constraints, or known facts.	20 pts
This criterion is linked to a Learning OutcomeRisk Categorization and AssessmentThis component assesses students' ability to properly categorize risks by their primary impact area and develop meaningful probability and impact scales. It evaluates whether students can assign each risk to one appropriate category with clear justification, and whether they can create scales with specific, meaningful thresholds rather than generic labels. High-quality work will include impact scales tailored to each category (scope, schedule, cost) with context-specific threshold descriptions that would be clear to project stakeholders.	20 to >18.0 ptsExemplaryAssigns each risk to exactly one primary impact category with compelling justification. Develops sophisticated probability and impact scales with precise, meaningful thresholds for each level that would be clear to stakeholders outside the project. Scale definitions demonstrate nuanced understanding of qualitative assessment. Impact scales are appropriately tailored to each impact category with specific, contextual threshold descriptions.18 to >16.0 ptsProficientAssigns each risk to one primary impact category with reasonable justification. Develops clear probability and impact scales with defined, meaningful thresholds for each level. Scale definitions demonstrate solid understanding of qualitative assessment. Impact scales address differences between impact categories with specific threshold descriptions. 16 to >14.0 ptsDevelopingAssigns each risk to a primary impact category but justification may be weak for some assignments. Develops basic probability and impact scales with threshold definitions that may lack specificity or meaningful context. Scale definitions show basic understanding of qualitative assessment but may have minor inconsistencies or vague thresholds.14 to >0 ptsInsufficientIncorrectly assigns risk categories or fails to provide justification. Probability and impact scales have vague, meaningless thresholds (e.g., "Medium = 3" without explaining what Medium means). Shows fundamental misunderstanding of qualitative risk assessment principles. Impact scales fail to address differences between impact categories or provide meaningful thresholds.	20 pts
This criterion is linked to a Learning OutcomeRisk Prioritization and AnalysisThis component measures students' ability to establish logical priority rankings with unique priorities for each risk, as well as their skill in identifying root causes. It evaluates the quality of justifications for priority assignments, the development of meaningful priority thresholds to guide management attention, and the depth of root cause analysis. Strong performance demonstrates insightful prioritization logic, specific rather than generic root causes, and appropriate matching of root cause analysis techniques to risk types.	15 to >13.5 ptsExemplaryEstablishes logical priority rankings with unique priority numbers for each risk. Provides insightful justification for priority assignments that demonstrates sophisticated risk analysis understanding. Develops clear, specific priority thresholds that meaningfully guide management attention. Identifies specific, insightful root causes for each risk that demonstrate sophisticated understanding of underlying factors. Root cause analysis techniques are appropriately matched to risk types with clear explanation.13.5 to >12.0 ptsProficientEstablishes reasonable priority rankings with unique priority numbers. Provides clear justification for priority assignments. Develops defined priority thresholds that guide management attention. Identifies specific root causes for each risk that go beyond surface issues. Root cause analysis techniques are generally appropriate for risk types. 12 to >10.5 ptsDevelopingAssigns unique priority numbers but justification may be weak or inconsistent. Priority thresholds lack specificity or practical application. Root causes are identified but some may be too general or superficial. Root cause analysis techniques are mentioned but may not always align with risk types.10.5 to >0 ptsInsufficientFails to assign unique priorities or provides illogical prioritization. Priority thresholds are missing, extremely vague, or impractical. Root causes are missing, extremely generic, or represent symptoms rather than causes. Fails to identify appropriate root cause analysis techniques.	15 pts
This criterion is linked to a Learning OutcomeRisk Response PlanningThis component evaluates students' ability to select appropriate response strategies that align with risk characteristics and develop specific implementation actions. It assesses understanding of PMI response strategy definitions, appropriate use of the "Escalate" strategy, quality of implementation planning, and reasonableness of cost estimates. Excellent work will demonstrate strategic thinking in response selection, provide detailed and practical implementation actions, and include realistic cost estimates with clear assumptions.	25 to >22.5 ptsExemplarySelects optimal response strategies for each risk that perfectly align with risk characteristics. Uses "Escalate" only when genuinely appropriate with compelling justification. Provides detailed, specific implementation actions that are highly practical within the project context. Offers sophisticated justification for strategy selection that considers multiple factors. Response cost estimates are realistic, detailed, and include clear assumptions. Demonstrates precise understanding of PMI response strategy definitions for both threats and opportunities.22.5 to >20.0 ptsProficientSelects appropriate response strategies that align well with risk characteristics. Uses "Escalate" rarely and with reasonable justification when selected. Provides specific implementation actions that are feasible within the project context. Offers clear justification for strategy selection. Response cost estimates are reasonable with stated assumptions. Demonstrates accurate understanding of PMI response strategy definitions. 20 to >17.5 ptsDevelopingSelects generally appropriate response strategies but with some misalignment to risk characteristics. May inappropriately use "Escalate" for risks within project manager authority. Implementation actions are somewhat generic or may have feasibility issues. Justification shows basic understanding but may lack depth. Response cost estimates are present but may lack detail or supporting assumptions. Shows general understanding of response strategy definitions with minor misconceptions.17.5 to >0 ptsInsufficientSelects inappropriate response strategies that do not align with risk characteristics. Inappropriately uses "Escalate" for routine project risks or fails to justify its use. Implementation actions are vague, impractical, or missing. Justification is weak or absent. Response cost estimates are unrealistic or missing. Shows significant misunderstanding of response strategy definitions.	25 pts
This criterion is linked to a Learning OutcomeRisk Ownership and MonitoringThis component assesses students' ability to assign appropriate risk owners and establish effective monitoring approaches. It evaluates whether ownership assignments reflect authority and capability to manage the risk, whether justifications for assignments are logical, and whether status tracking approaches are comprehensive and practical. Strong performance shows thoughtful matching of risks to appropriate owners and sophisticated understanding of risk monitoring processes.	10 to >9.0 ptsExemplaryAssigns highly appropriate risk owners based on authority, capability, and responsibility areas. Provides insightful justification for ownership assignments. Establishes a comprehensive status tracking approach with clear, detailed status categories. Status update field demonstrates sophisticated understanding of risk monitoring processes.9 to >8.0 ptsProficientAssigns appropriate risk owners with clear justification. Establishes a logical status tracking approach with defined status categories. Status update field demonstrates solid understanding of risk monitoring processes. 8 to >7.0 ptsDevelopingAssigns risk owners but some assignments may lack clear justification or appropriateness. Establishes a basic status tracking approach that may have minor gaps. Status update field demonstrates basic understanding of risk monitoring processes.7 to >0 ptsInsufficientAssigns inappropriate risk owners or provides no justification. Status tracking approach is illogical, inconsistent, or missing. Demonstrates poor understanding of risk monitoring processes.	10 pts
This criterion is linked to a Learning OutcomeRisk Register Structure and Additional ElementsThis component evaluates the overall organization, completeness, and usability of the risk register. It assesses professional formatting, inclusion of all required elements, quality of scale definitions, effectiveness of risk visualization, and value of additional fields. High-quality work demonstrates exceptional organization, clear and meaningful threshold definitions, informative visualization of risk distribution, and thoughtfully selected additional fields that enhance risk management for this specific project.	10 to >9.0 ptsExemplaryCreates an exceptionally well-organized risk register with professional formatting and complete information across all required fields. Includes all required tabs with clear, detailed scale definitions with meaningful thresholds for each level. Risk matrix or other visualization clearly illustrates risk distribution. Additional fields demonstrate exceptional insight into project-specific risk management needs with compelling explanation of their value.9 to >8.0 ptsProficientCreates a well-organized risk register with appropriate formatting and complete information. Includes all required tabs with clear scale definitions and meaningful thresholds. Risk matrix or visualization effectively illustrates risk distribution. Additional fields are relevant to project-specific needs with clear explanation of their value. 8 to >7.0 ptsDevelopingCreates a basically organized risk register with minor formatting issues or information gaps. Includes required tabs but scale definitions may have limited specificity or meaningful context. Risk visualization has minor limitations. Additional fields are present but may have limited relevance or explanation.7 to >0 ptsInsufficientCreates a poorly organized risk register with significant formatting issues or missing information. Required tabs are incomplete or missing. Scale definitions lack meaningful thresholds. Risk visualization is missing or ineffective. Additional fields are irrelevant, unexplained, or missing.	10 pts

Total Points: 100