Risk Assessment Checklist

Confidentiality Statement
This <document title> along with all attachments hereto shall be considered <company>s Proprietary/Confidential Information

gantthead.com

Risk Assessment Checklist

Carefully and honestly assess your project according to each Risk Factor. Check the appropriate Risk Level box for each
Factor based on the criteria defined for each Risk Level.

Project Size
RiskFactor
PersonHours
EstimatedCalendarDuration
TeamSizeatPeak
NumberofSitesAffected
NumberofInterfacesto
ExistingSystemsAffected
NumberofUser
OrganizationsAffected

RiskLevel:LOW
5000orless
4monthsorless
4orfewermembers
1
0

RiskLevel:MEDIUM
500120,000
512months
515members
23
13

RiskLevel:HIGH
over20,000
over12months
over15members
over3
over3

24

over5

RiskFactor
ProjectScope

RiskLevel:LOW
Welldefined

RiskLevel:MEDIUM
Defined,buthighlevel

RiskLevel:HIGH
Vague

ProjectDeliverables
ProjectBenefits
UserRequirements
Definition
KnowledgeLevelofUsers

Welldefined
Definedindetail
Clearlydefined

Definedinname,notcontent
Definedingeneral
Somewhatdefined,but
complex
Knowledgeableofuserarea
only
Half

Notdefined
Notdefinedorunclear
Veryvagueandcomplex

Morethan75%
complete/current

Nonexistent,lessthan75%
complete,oroutofdate

Project Definition

NumberofTeamMembers
VeryKnowledgeableof
Business
StatusofAvailable
Documentation
2007 gantthead.com

KnowledgeableofIT&user
areas
All
Completeandcurrent

Lackadequateuser
knowledge
None

gantthead.com

RiskFactor
No.ofOtherDevelopment
ProjectsonWhichSystem
Depends
No.ofOtherDevelopment
ProjectsDependentonThis
System
CostEstimates

Risk Assessment Checklist

RiskLevel:LOW
0

RiskLevel:MEDIUM
1

RiskLevel:HIGH
2ormore

2ormore

Completelydocumented
usingprovenpractices

Approximationsused

Estimatesnotdocumentedor
notbasedonprovenmethod

RiskLevel:LOW
Identifiedandenthusiastic
Understandsvalue&
supportsproject
Understandsvalue&
supportsproject
Incl.inPlanoradded
w/approval
Mostunderstandvalue&
supportproject

RiskLevel:MEDIUM
Identifiedbutpassive
Issomewhatreluctant

RiskLevel:HIGH
Unknown
Isveryskeptical/resistant

Issomewhatreluctant

Isveryskeptical/resistant

AddedtoPlan,notyet
approved
Someunderstandvalue&
supportproject

NotpartofPlan

RiskFactor
Conversionvs.NewSystem

RiskLevel:LOW
Newsystem

EffectsofSystemon
ComputerOperations
ProceduralChangesImposed
byNewSystem

Littlechange

RiskLevel:MEDIUM
Partiallyreplaceslegacyor
subsystems
Moderatechange

RiskLevel:HIGH
Completeconversionfrom
legacysystemtonewsystem
Radicalchange

Littlechange

Moderatechange

Radicalchange

Sponsorship
RiskFactor
ProjectSponsor
CommitmentLevel/Attitude
ofUserManagement
CommitmentLevel/Attitude
ofUserOrganization
SystemsRelationshipto
StrategicSystemsPlan
CorporateManagement
LevelofCommitment

Fewunderstandvalue&
supportproject

Effect on Organization

2007 gantthead.com

gantthead.com

RiskFactor
ChangestoOrganizational
StructureRequired
PolicyChangesRequired

Risk Assessment Checklist

RiskLevel:LOW
Littlechange

RiskLevel:MEDIUM
Moderatechange

RiskLevel:HIGH
Radicalchange

Nochanges

Moderatechanges

Extensivechanges

RiskFactor
ProjectManagerExperience
Level
ProjectManagerAvailability

RiskLevel:LOW
3ormoreprojectsofsimilar
scope
Fulltimeonproject

RiskLevel:MEDIUM
12projectsofsimilarscope

ProjectTeamAvailability
ProjectTeamsSharedWork
Experience
TeamsExperiencewithThis
Application
PhysicalLocationofTeam

Allarefulltime
Allhaveworkedtogether
before
Implementedmorethanonce

RiskLevel:HIGH
Nopriorprojectsofsimilar
scope
Managingoneormore
additionalprojects
Lessthanhalffulltime
Nonehaveworkedtogether
before
Neverimplemented

UserParticipationonProject
Team

Usersarefulltimeteam
members

Project Staffing

Fullteamlocatedtogether

Fulltime,minorduties
elsewhere
Halfofteamfulltime
Somehaveworkedtogether
before
Implementedonce
Mostofteamlocated
together
Usersareparttimeteam
members

Teamisdispursedamong
severalsites
Nouserparticipationonteam

RiskLevel:MEDIUM
Methodologynewtoteam

RiskLevel:HIGH
Nomethodology

Establishedbutunclear

Nonexistent

Project Management
RiskFactor
DevelopmentMethodology
Used
ChangeManagement
Procedures

2007 gantthead.com

RiskLevel:LOW
SystemDevelopment
Methodologyfamiliarto
team
Welldefined

gantthead.com

RiskFactor
QualityManagement
Procedures
ProjectManagement
TechniquesEmployed

Risk Assessment Checklist

RiskLevel:LOW
Welldefinedandaccepted

RiskLevel:MEDIUM
Establishedbutunclear

RiskLevel:HIGH
Nonexistent

Inuse,accepted,andproven

Techniquesinplacebutnot
proven

Specifictechniquesnot
employed

RiskLevel:LOW
None

RiskLevel:MEDIUM
Reasonableassuranceof
availability

RiskLevel:HIGH
Allnew

Guaranteedavailability

Reasonableassuranceof
availability

Noassuranceofavailability

RiskLevel:LOW
Veryfamiliartoteam

RiskLevel:MEDIUM
Somewhatfamiliartoteam

Nonewlanguages
Wellestablishedinthe
systemdevelopment
organization

Somewhatnewlanguage
Establishedbutnewforthis
application

RiskLevel:HIGH
Usedforthefirsttimeby
team
Newlanguage,usedfirsttime
Newtoorganization

RiskLevel:LOW
Batchprocessingonly

RiskLevel:MEDIUM
Simpleonlinequeryand
update

Project Hardware/Software
RiskFactor
RequirementsforNewor
NonStandardHardwareor
SystemSoftware
AvailabilityofHardwarefor
DevelopmentandTesting

Project Development Approach

RiskFactor
DevelopmentToolsand
Techniques
ProgrammingLanguage
DBMS

System Complexity
RiskFactor
TypeofProcessing

2007 gantthead.com

RiskLevel:HIGH
Complexprocessingusedfor
thefirsttime
5

gantthead.com

Risk Assessment Checklist

RiskFactor
OnlineSystemResponse
TimeasCriticalRequirement
RequirementforSystem
Availability
NumberofDifferent
TechnologiesRequiredby
System
ComplexityofDataUsedby
System(measuredby#of
entities&relationships
betweenthem)
DataQualityforConversion
Process

RiskLevel:LOW
>7seconds90%ofthetime

RiskLevel:MEDIUM
37seconds90%ofthetime

RiskLevel:HIGH
2seconds90%ofthetime

95%athost

98%athost

Greaterthan99%athost

1or2

4ormore

Notcomplex

Moderatelycomplex

Verycomplex

Simpletoconvertorofgood
quality

Averagecomplexityoroffair Verycomplexorofpoor
quality
quality

Software Package
RiskFactor
TeamsKnowledgeof
Package

RiskLevel:LOW
Previousexperience

RiskLevel:MEDIUM
Conceptualunderstanding

RiskLevel:HIGH
Noknowledgeorexperience

NumberofTimes
TeamHasDonePrior
WorkwithVendor
FunctionalMatchof
PackagetoSystem
Requirements
TeamsInvolvementin
PackageSelection

3ormoretimes

1or2times

Never

Minimalcustomization
required

Moderatecustomization
required

Majorcustomizationrequired

Highinvolvementinselection

Helpedselectfromshortlist

Notinvolved

2007 gantthead.com