Development of a Generic Risk Matrix to Manage Project Risks

Document Type : Research Paper


Engineering Management and Systems Engineering (EMSE) Department, Missouri University of Science & Technology, U.S.A


A generic risk matrix is presented for use identifying and assessing project risks quickly and cost effectively. It assists project managers with few resources to perform project risk analysis. The generic risk matrix (GRM) contains a broad set of risks that are categorized and ranked according to their potential impact and probability of occurrence. The matrix assists PMs in quickly identifying risks and can serve as a basis for contingency planning to minimize cost and schedule overruns. It is suitable for a wide variety of projects and can be modified for specific types of projects using historical data or expert opinion. An R&D project case study is included to demonstrate how the GRM is applied for a specific project.


Main Subjects

[1] A guide to the project management body of knowledge (PMBOK®) (2008), Newtown Square, PA; US: Project Management Institute; Fourth edition.
[2] Abdou A., Alzarooni S., Lewis J. (2005), Risk identification and rating for public health care projects in the United Arab Emirates; Proceeding of the Queensland University of Technology Research Week International Conference; Brisbane, Australia.
[3] Chao LP., Ishii K. (2003), Design Process Error-proofing: Failure Modes and Effects Analysis of the Design Process; Proceedings of ASME Design Engineering Technical Conferences; IL, U.S.A.
[4] Chapman R.J. (2001), The Controlling Influences on Effective Risk Identification and Assessment for Construction Design Management; International Journal of Project management 19(3); 147-160.
[5] Chapman C., Ward S. (2003), Project Risk management: Processes, Techniques and Insights; 2nd Edition, England; John Wiley & Sons. [6] Clemens P.L. (2002), Fault Tree Analysis; 4th ed., Tullahoma, TN; Jacobs Sverdrup.
[7] Condamin L., Louisot J.P., Naiim P. (2006), Risk Quantification: Management, Diagnosis and Hedging; John Wiley & Sons; Ltd.
[8] Cooper D.F., Grey S., Raymond G., Walker P. (2005), Project Risk Management Guidelines; John Wiley & Sons; Ltd.
[9] Department of Defense: Standard Practice for System Safety (2000), MIL-STD-882-D.
[10] Dyke, Frederick T., Ozog H. (2002), Designing an Effective Risk Matrix; An ioMosaic Corporation Whitepaper.
[11] Ghosh S., Jintanapakanont J. (2004), Identifying and Assessing the Critical Risk Factors in an Underground Rail Project in Thailand: a Factor Analysis Approach; International Journal of Project Management 22(8); 633-643. [12] Jonassen D.H., Tessmer M., Hannum W.H. (1999), Task analysis methods for instructional design; Psychology Press.
[13] Gray, Clifford, Larson E. (2005), Project Management: The Complete Guide for Every Manager; Mc-Graw Hill Publishing Company; Edition 2nd.
[14] Hall D.C., Hulett D.T (2002), Universal Risk Project-Final report; Available from PMI Risk SIG website.
[15] Henselwood, Fred, Phillips, Grey (2006), A Matrix-based Risk Assessment Approach for Addressing Linear Hazards such as Pipelines; Journal of Loss Prevention in the Process Industries 19; 433-441.
[16] Hillson D.A., Hulett D.T. (2004), Assessing Risk Probability: Alternative Approaches; Proceedings of Project Management Institute Global Congress; Prague, Czech Republic.
[17] Hillson D. (2002), Use of Your Risk Breakdown Structure to Understand Your Risks; Proceedings of the Project Management Institute Annual Seminars & Symposium; San Antonio, Texas, USA.
[18] Hillson D.A., Hulett D.T. (2004), Assessing Risk Probability: Alternative Approaches; Proceedings of PMI Global Congress; Prague.
[19] Hillson, David (2002), The Risk Breakdown Structure (RBS) as an Aid to Effective Risk Management; Proceedings of the Fifth European Project Management Conference; France.
[20] Karuppuswamy P., Sundararaj G., Devadasan S.R., Elangovan D. (2006), Failure Reduction in Manufacturing Systems through the Risk Management Approach and the Development of a Reactive Maintenance Model; International Journal of Risk Assesment and Management 6(4/5/6).
[21] Lansdowne Z. F. (1999), Risk matrix: an approach for prioritizing risks and tracking risk litigation progress; Proceedings of the 30th Annual Project Management Institute Seminars & Symposium.
[22] Lyons T., Skitmore M. (2004), Project Risk Management in Queensland Engineering Construction Industry: A Survey; International Journal of Project Management 22; 51-61.
[23] Leung P., Ishii K., Abell J., Benson J. (2005), Global Failure Modes and Effects Analysis: A Planning Tool for Global Product Development; Proceedings of ASME International Design Engineering Technical Conferences and Computers and Information in Engineering Conference; CA, U.S.A.
[24] Miller R., Lessard D. (2001), Understanding and Managing Risks in Large Engineering Projects; International Journal of Project Management 19(8); 437-443.
[25] Murray S., Alpaugh A., Burgher K., Flachsbart B., Elrod C. (2010), Development of a Systematic Approach to Project Selection for Rural Economic Development: A Case Study of Vienna, Missouri, USA; Journal of Rural and Community Development 5(2).
[26] Nielsen K.R. (2006), Risk Management: Lessons from Six Continents; Journal of Management in Engineering 22(2); 61-67.
[27] Rafele C., Hillson D., Grimaldi S. (2005), Understanding project risk exposure using the two-dimensional risk breakdown matrix; Proceeding of PMI Global Congress; Edinburgh, Scotland. [28] Cleland D.L., Ireland L. (2010), Project Managers Portable Handbook 3/E; McGraw-Hill Prof Med/Tech; 464.
[29] Rausand M., Hoyland A. (2003), System Reliability Theory: Models, Statistical Methods, and Applications; Wiley, 2nd Edition.
[30] Rosenburg L., Hammer T., Gallo A. (1999), Continuous risk management at NASA; Proceeding of Quality Week Conference; San Francisco, California. [31] Shen G., Feng J., Xu K. (2008), Identification of Essential Risk Factors in Software Projects by using an ‘Information Content’ based Reasoning Approach; Computing and Information Systems Journal 12(2); 29-36.
[32] Simon P.W., Hillson D.A., Newland K.E. (2004), Project Risk Analysis & Management (PRAM) guide; 2nd edition, High Wycombe, Buckinghamshire; UK, APM Group.
[33] Stamatis D.H. (2003), Failure Mode and Effect Analysis: FMEA from Theory to Execution; ASQ Quality Press; 2nd Edition.
[34] Telford T. (2005), Risk Analysis and Management for Projects (RAMP); 2nd edition Institution of Civil Engineers (ICE), Faculty of Actuaries; Institute of Actuaries, London.
[35] Tummala V.M.R., Burchett J.F. (1999), Applying a Risk Management Process (RMP) to Manage Cost risk for an EHV Transmission Line Project; International Journal of Project Management 17(4); 223-235. [36] McInnis A. (2001), The New Engineering Contract: A legal commentary; Thomas Telford Publishing; London.
[37] Wang J.X., Roush M.L. (2000), What Every Engineer Should Know About Risk Engineering and Management; Marcel Dekker Inc.
[38] Ward S.C. (1999), Assessing and Managing Important Risks; International Journal of Project Management 17(6); 331-6.
[39] Wideman R.M. (1992), Risk Management: A Guide to Managing Project Risks and Opportunity: Project and Program; Project Management Institute, Pennsylvania.
[40] Thomsett R., "Risk in Projects-The Total Tool Set",, 2006.