Image: Thumbnail of Report Cover

Download PDFPDF version of guide [3.0MB]

Download PDFPDF of Quick reference card [0.3MB]

Download PDFTips for PDF and HTML versions [0.5MB]

Download PDFWord version of checklists [0.1MB]

Engaging with risk and uncertainty

Better Practice results: Higher success rate on delivering projects within announced time, budget and scope due to risks and uncertainty being effectively addressed.

Leadership and risk

An important leadership responsibility for executives is to foster a culture of effective engagement with risk.

Risk

Many, if not all, entities have well-documented risk management frameworks based on sound risk management principles, and prepare risk plans as an integral element of project proposals.

Despite this attention to risk, there are still projects which are significantly late, over budget, or have shortfalls in planned outcomes due to reasonably foreseeable risks not being identified and addressed appropriately. Some of the causes of these shortfalls are best addressed at the entity level, by executives with corporate responsibilities.

Factors that may cause entities to not effectively address risk during project planning include:

  • a lack of skill in reliably identifying and mitigating risks;
  • insufficient support in entity operational arrangements for managing contingency funds and contingency time allowances;
  • a lack of clarity on the level of risk the entity is prepared to accept (also known as the entity’s risk appetite);
  • insufficient openness to the identification of risks; and
  • high-risk objectives for projects, arising from legitimate expectations on the public sector for solutions to difficult problems.

Risk management issues following project planning, such as risk monitoring and effective response to adverse events, are discussed in Chapter 4.

The first two factors – skill and supportive operational arrangements – can generally be addressed through internal management improvement initiatives. For example: training programs in risk management; allocating time to monitoring actual risk events and using the findings to improve future risk identification and mitigation; developing an agency-specific list of risk categories (such as legislative, benefits realisation, implementation, public reputation); and developing protocols and organisational culture to have contingency allowances provided and to operate as intended.

The third factor – lack of clarity by the entity on an acceptable level of risk – leaves project risk to be addressed by approval committees on an ad hoc basis. This can increase the risk that there will be an unexpectedly high rate of project failure. Clarity on preferred risk levels can be improved by considering the categories of projects undertaken by the entity, and then nominating a preferred maximum residual risk for each category. This will provide a thoughtful, entity-wide approach to risk thresholds, which can be used as part of the screening of project proposals (as discussed on page 29). For example, an entity may decide that it will accept a high or medium level of risk for small pilot projects for innovative ideas, and will only accept a low level of risk for projects affecting service delivery to the broader public.

The fourth factor – insufficient openness to risk identification – can be more difficult to assess and address. Advice from a trusted independent adviser can be a useful first step – in assessing whether this is an issue, and if so, identifying any underlying causes and possible remedial actions. More generally, an important leadership responsibility for executives is to foster a culture of effective engagement with risk. The desired outcome is a balanced approach, where:

  • executives take responsibility for either accepting risks or resourcing their mitigation, and executives acknowledge the benefits of being made aware of risks; and
  • line staff make mature judgements on risks, deal with issues within their control or which are routine, and put forward risks for executive attention that are based on a realistic assessment and are accompanied by achievable mitigation measures.

Realistic expectations

“Our close relationship with the Minister’s office and central agencies keeps paying off. For example on one high-profile project we worked together on the wording of the public announcement. Promising ‘a significant increase in information available within 6 months’ met public expectations and was practical. We delivered it. But without a close relationship there could easily have been expectations set that we simply could not deliver.”

… Project sponsor.

The fifth factor – higher risk projects arising from high expectations – requires sensitive management. It is only natural that there are high expectations of publicly funded projects, and that there will be pressures from many sources to set ambitious goals. Accordingly, many risk management activities for this factor will be most usefully taken in advance, for example:

  • Developing an effective relationship with the Minister’s office and central agencies, to provide a basis for discussions of potential project announcements and help reduce the risk of shortfalls in project delivery.
  • Developing a pool of skilled staff that can develop project modules or phases that realistically balance technical feasibility with the need to provide a stream of benefits quickly.
  • Assessing potential areas for ambitious projects and collecting information to aid in project planning and estimation in those areas – for example though consulting entities with relevant experience, tailoring of current work to explore areas of interest, or conducting pilot projects. This will assist informed decision-making before details of projects are made public.

Managing uncertainty takes trust

“The entity that I worked at with the best record for delivering projects on time and on budget handled the uncertainty in estimates professionally. But that took mutual trust, developed over some years. I could say ‘that project will take between three and six months, and I will be able to narrow that down after one month’ and I could trust that management would not tell the Secretary it would be done in the most optimistic time, and management could trust that I would narrow the estimate down when promised.”

… Project team leader.

Uncertainty of estimates

The reliability of estimates of the cost and timeframe for a project is influenced by a number of factors. These include the reliability and level of detail of the description of the project’s scope and deliverables, the degree of innovation in the project, and the skills and experience of those making the estimate. The first two factors mean that estimates of project cost and timeframe at early stages of planning are likely to be inherently uncertain.

It is better practice for entities to acknowledge this uncertainty in project estimation and have a culture and planning processes that:

  • make clear to decision-makers the inherent uncertainty of early estimates;
  • help decision-makers express their preference as to how this inherent uncertainty is to be managed – for example by refining the project scope as needed to remain within a preferred timeframe, refining the budget for a preferred project scope, or some other combination of timeframe, budget and scope;
  • assist decision-makers by expressing estimates as a likely range; and
  • indicate the effort and activities to be undertaken to provide greater certainty of estimates as the project progresses.