Probability and Impact Scales for Risk Assessment
PMBOK v8 Definition
Probability and impact scales are definitions used when assessing and prioritizing individual project risks. These scales are specific to the project context and reflect the risk appetite and thresholds of the organization and key stakeholders. The number of levels reflects the degree of detail required for the risk process, with more levels used for a more detailed risk approach (typically five levels) and fewer for a simple process (usually three levels). These scales evaluate both threats and opportunities by interpreting impact definitions as negative for threats (delay, additional cost, and performance shortfall) and positive for opportunities (reduced time or cost and performance enhancement). This concept belongs to the Perform Quantitative Risk Analysis process within the Project Risk Management knowledge area.
Why It Matters for the Exam
This concept appears frequently in PMI exam questions about risk assessment methodology and prioritization. Exam questions test your understanding of how probability and impact definitions are tailored to the project, how they apply differently to threats versus opportunities, and how the number of scale levels affects risk analysis detail. Questions often appear as scenario-based items asking you to select the correct scale application or interpret a risk matrix.
Key Points to Remember (for the exam)
- Scale Levels: 3 levels for simple processes, 5 levels for detailed risk approaches
- Threat Impact: Negative definitions (delay, additional cost, performance shortfall)
- Opportunity Impact: Positive definitions (reduced time, reduced cost, performance enhancement)
- Descriptive Terms: Very high, high, medium, low, very low (or numeric values)
- Numeric Scoring: Probability × Impact = Probability-Impact score for each risk
- Common Confusion: The same scale definitions are used for both threats and opportunities, but interpreted with opposite signs
- Intangible Risks: Some risks (ethical, reputation, team morale) may not map cleanly into probability and impact scales
Typical PMI Exam Example
A project manager is creating risk assessment scales for a construction project. The organization requires five levels of detail. The team defines "very high" impact as a 6-month schedule delay for threats. For opportunities, "very high" impact should be defined as a 6-month schedule reduction. Both use the same scale structure but with opposite interpretations for threats versus opportunities.
PMI Exam Traps
- Trap: Confusing probability and impact definitions with the risk register content
- Reality: Definitions are created in Plan Risk Management; risk register contains assessed risks using those definitions
- Trap: Assuming all risks can be mapped to probability and impact scales
- Reality: Ethical risks, reputation risks, and team morale impacts may require separate handling
- Trap: Using different scale levels for threats and opportunities
- Reality: Both threats and opportunities use the same probability and impact matrix, with positive definitions for opportunities and negative for threats
- Trap: Thinking more scale levels always means better risk management
- Reality: Number of levels reflects required detail; 3 levels for simple processes, 5 for detailed approaches
Important PMI Connections
| Related Concept | Relationship Type | Exam Attention Point |
|---|---|---|
| Risk Appetite and Thresholds | Input to scale definition | Scales reflect organizational risk appetite and stakeholder thresholds |
| Probability and Impact Matrix | Output of scale definitions | Matrix uses these definitions to prioritize risks within each priority level |
| Perform Quantitative Risk Analysis | Process using these scales | Scales enable numeric scoring and relative priority evaluation |
| Plan Risk Management | Process that defines scales | Scales are defined early in the project during risk management planning |
Quick Review Questions
- When using five levels for probability and impact scales, what is the primary advantage over using three levels?
- How should the same probability and impact scale be interpreted differently for threats versus opportunities?
- What types of risks may not be easily mapped into standard probability and impact scales?
- How are numeric probability and impact values used to calculate a risk's relative priority?
- What determines whether a project uses three levels or five levels for its risk scales?
PMBOK v8 Reference
Section 2.7.2.1 - Plan Risk Management (definitions of probability and impact levels) Table 4-2 - Example of definitions of probability and impacts against three project objectives