
3.4 : Maintain and Execute Risk Processes
Objective
Execute risk management processes to identify and mitigate risks / issues throughout the implementation.
View Lessons LearnedRecommended Best Practices
-
Shared
Integrate risk processes between customer and provider, updating Risk Management Plan
customerprovider -
Shared
Maintain / update Risks, Actions, Issues, and Decisions (RAID) Log
-
Shared
Coordinate across all work streams on new / updated risks and implementation status (~every 2 weeks)
-
Shared
Develop and employ mitigation strategies continuously throughout Phase 3
-
Shared
Report new and on-going risks/issues
-
Shared
Include discussion on mitigation efforts in meetings with decision-makers and in Status Reports
-
Shared
Perform Risk Assessment, as appropriate
3.4 Lessons Learned
- Develop joint Risk Management Plan and establish PMO risk function before transition to coordinate risk management efforts
- Regularly meet on risk, incorporating updates into reporting and escalation; document in RAID Log to facilitate communication
- Define risk roles for staff / executives at customer agency and provider; train teams on risk identification and mitigation
- Train and empower risk liaisons to drive accountability
Stakeholders
Recommended stakeholders, inputs, & outputs may vary by implementation; however, agencies that contributed to this Playbook reported these factors as increasing the likelihood of success.Customer
- Executive Sponsor
- Business Owner
- Program Manager
- Risk Manager
- PMO Lead
- PMO Team
Provider
- Executive Sponsor
- Business Owner
- Program Manager
- Risk Manager
- PMO Lead
- PMO Team