Risk Analysis: Probability, Impact, and Assessment Techniques

PMBOK v8 Definition

Risk analysis is the process of prioritizing individual project risks for further analysis or action by assessing their probability of occurrence and impact on project objectives, as well as assessing overall project risk exposure. Risk probability assessments consider the likelihood that a specific risk will occur, while risk impact assessments consider the potential effect on one or more project objectives such as schedule, cost, quality, or performance. Impacts are negative for threats and positive for opportunities.

Why It Matters for the Exam

Risk analysis appears frequently on the PMI exam in questions testing your ability to distinguish between qualitative and quantitative analysis techniques, identify correct tools for each analysis type, and understand how probability and impact levels drive risk prioritization. Expect scenario-based questions where you must select the appropriate analysis technique based on the project situation, as well as direct questions about the definitions and outputs of specific analysis methods.

Key Points to Remember (for the exam)

• Probability and Impact Assessment: Assesses likelihood of occurrence and potential effect on schedule, cost, quality, or performance for each identified individual project risk. Conducted in interviews or meetings with participants familiar with the types of risk recorded in the risk register.

• Probability and Impact Levels: Defined in the risk management plan; these levels enable consistent evaluation and comparison of risks across the project. They are applied to each identified risk during the analysis process.

• Risk Breakdown Structure (RBS): A hierarchical representation of potential sources of risk, used to help the project team identify and categorize risks. It is an input to risk identification and supports systematic risk analysis.

• Risk Exposure: The overall effect of all identified risks on project objectives, considering both individual threats and opportunities. This concept is central to understanding overall project risk.

• Reserve Analysis: Used to determine the amount of contingency and management reserves needed for the project based on the results of risk analysis. This connects risk analysis directly to budget and schedule decisions.

• Sensitivity Analysis: A quantitative technique that helps determine which individual project risks have the most potential impact on project outcomes. It is typically presented as a tornado diagram.

• Simulation Models: A quantitative technique (often Monte Carlo simulation) that models the combined effect of multiple individual project risks to evaluate their potential impact on project objectives.

Typical PMI Exam Example

A project manager is evaluating risks for a construction project. During a meeting with subject matter experts, each identified risk is assessed for its likelihood of occurrence (rated 0.1 to 1.0) and its potential impact on the project budget (rated in monetary terms). The project manager multiplies probability × impact to calculate each risk's expected monetary value. This is an example of quantitative risk analysis using probability and impact assessment combined with simulation or sensitivity analysis depending on the specific technique applied.

PMI Exam Traps

• Trap: Confusing probability and impact assessment (qualitative) with simulation models (quantitative).

  • Reality: Probability and impact assessment is typically qualitative and used for prioritization; simulation models are quantitative and used for numerical analysis of combined effects.

• Trap: Thinking risk analysis only applies to threats.

  • Reality: Risk analysis applies to both threats (negative impacts) and opportunities (positive impacts). Impact assessments consider positive effects for opportunities.

• Trap: Believing risk analysis is performed only once at the beginning of the project.

  • Reality: Risk analysis is performed throughout the project; new risks are identified and analyzed continuously, and existing risks are reassessed.

• Trap: Confusing reserve analysis with risk analysis.

  • Reality: Reserve analysis uses the outputs of risk analysis to determine contingency reserves; it is a separate process that depends on risk analysis results.

Important PMI Connections

Quick Review Questions

1. What two dimensions are assessed for each individual project risk during probability and impact assessment?

2. Which risk analysis technique uses a tornado diagram to display results and identify which risks have the most potential impact on project outcomes?

3. During risk analysis, how are impacts different for threats compared to opportunities?

4. What document contains the probability and impact levels used to evaluate risks consistently across the project?

5. What is the difference between reserve analysis and risk analysis in terms of their purpose and timing?

PMBOK v8 Reference

Section 2.7.2 – Risk Performance Domain Section 5 – Tools and Techniques (Risk probability and impact assessment, sensitivity analysis, simulation models)