11114 enterprise environmental factors the enterprise

11.1.1.4 ENTERPRISE ENVIRONMENTAL FACTORS
The enterprise environmental factors that can influence the Plan Risk Management process include but are not
limited to overall risk thresholds set by the organization or key stakeholders.
11.1.1.5 ORGANIZATIONAL PROCESS ASSETS
The organizational process assets that can influence the Plan Risk Management process include but are not
limited to:
u
Organizational risk policy;
u
Risk categories, possibly organized into a risk breakdown structure;
u
Common definitions of risk concepts and terms;
u
Risk statement formats;
u
Templates for the risk management plan, risk register, and risk report;
u
Roles and responsibilities;
u
Authority levels for decision making; and
u
Lessons learned repository from previous similar projects.

404
Part 1 - Guide
11.1.2 PLAN RISK MANAGEMENT: TOOLS AND TECHNIQUES
11.1.2.1 EXPERT JUDGMENT
Described in Section 4.1.2.1. Expertise should be considered from individuals or groups with specialized knowledge
or training in the following topics:
u
Familiarity with the organization’s approach to managing risk, including enterprise risk management where this
is performed;
u
Tailoring risk management to the specific needs of a project; and
u
Types of risk that are likely to be encountered on projects in the same area.
11.1.2.2 DATA ANALYSIS
Data analysis techniques that can be used for this process includes but are not limited to a stakeholder analysis
(Section 13.1.2.3) to determine the risk appetite of project stakeholders.
11.1.2.3 MEETINGS
The risk management plan may be developed as part of the project kick-off meeting or a specific planning meeting
may be held. Attendees may include the project manager, selected project team members, key stakeholders, or team
members who are responsible to manage the risk management process on the project. Others outside the organization
may also be invited, as needed, including customers, sellers, and regulators. A skilled facilitator can help participants
remain focused on the task, agree on key aspects of the risk approach, identify and overcome sources of bias, and
resolve any disagreements that may arise.
Plans for conducting risk management activities are defined in these meetings and documented in the risk
management plan (see Section 11.1.3.1).

��
405
11.1.3 PLAN RISK MANAGEMENT: OUTPUTS
11.1.3.1 RISK MANAGEMENT PLAN
The risk management plan is a component of the project management plan that describes how risk management
activities will be structured and performed. The risk management plan may include some or all of the following elements:
u
Risk strategy. Describes the general approach to managing risk on this project.
u
Methodology. Defines the specific approaches, tools, and data sources that will be used to perform risk
management on the project.
u
Roles and responsibilities. Defines the lead, support, and risk management team members for each type of
activity described in the risk management plan, and clarifies their responsibilities.