This week, we’ve been studying risk management. As a project manager, one of the most important things you’ll have to analyze is risk. Talk about a couple of risks companies can face when undertaking any new project. Specify how you would apply this week’s learning to your thoughts. Comment on your classmate’s postings and see what ideas you can glean from their input as well.
You are an Action Officer (AO) assigned to the county Homeland Security Office. The director has requested that you conduct a risk analysis of the county administrative building and courthouse. She is concerned that the existing analysis is outdated, did not conform to the current U.S. Department of Homeland Security (DHS) risk analysis methodology, and did not employ the National Scenarios. The director has informed you of her intention to present your report to the county commission to seek additional funding to expand the Risk Analysis effort to other Critical Infrastructure and Key Resources (CIKR) facilities within the county and to broaden the county’s CIKR planning, response, and recovery capabilities.
- Using the DHS risk management framework depicted in the National Infrastructure Protection Plan (NIPP) and the key points concerning critical infrastructure protection (CIP) learned thus far, create a simple matrix to facilitate a risk analysis and assessment of your county courthouse or another local government building in your municipality. This is only a notional analysis or assessment to familiarize you with the various factors potentially impacting a real and comprehensive CIKR risk analysis.
- Note: Do not get frustrated with the unavailable, missing details or facts. Just use your imagination. Focus on the process instead of the missing data.
- Using the matrix that is located in the additional Phase Resources and your analysis, conduct a notional risk analysis of your county courthouse or another government building in your locale.
- Address the risk factors using the situations depicted by the 15 National Planning Scenarios.
- If you feel there are other more likely scenarios that need mentioning, do so.
- This is a formal report. The professionalism, detailed descriptions, and completeness of the report are essential to the director in gaining additional funding.
Write a summary of the case and answer the following questions from the end of the case.
- Why was a risk management plan considered unnecessary?
- Should risk management planning be performed in the proposal stage or after contract award, assuming that it must be done?
- Does the customer have the right to expect the contractor to perform risk analysis and develop a risk management plan if it is not called out as part of the contractual statement of work?
- Would Altex have been more interested in developing a risk management plan if the project were funded entirely from within?
- How might the Army have responded if they were presented with a risk management plan early during the R&D activities?
- Can risk management planning be justified on almost all programs and projects?