<PROJECT NAME>

RISK MANAGEMENT PLAN

Version <1.0>
<mm/dd/yyyy>
[Insert appropriate Disclaimer(s):
E.g.: For Internal CDC se !nly" #ensiti$e %&t nclassi'ied(
<Project Name> Version: <1.1>
VERSION HISTORY
[)ro$ide in'ormation on *o+ t*e de$elopment and distri,&tion o' t*e Risk Management
Plan &p to t*e 'inal point o' appro$al +as controlled and trac-ed. se t*e ta,le ,elo+ to
pro$ide t*e $ersion n&m,er" t*e a&t*or implementing t*e $ersion" t*e date o' t*e $ersion"
t*e name o' t*e person appro$ing t*e $ersion" t*e date t*at partic&lar $ersion +as
appro$ed" and a ,rie' description o' t*e reason 'or creating t*e re$ised $ersion.(
Version
#
Implemented
By
Reision
!"te
Approed
By
Appro"l
!"te
Re"son
1.0 <.&t*or name> <mm/dd/yy> <name> <mm/dd/yy> Initial Risk Management
Plan draft
1.1 <.&t*or name> <mm/dd/yy> <name> <mm/dd/yy> <reason>
#P Templ"te Version: 11/30/06
Revision Date: <mm!!"""">
Risk Management Plan Tem#late [Insert appropriate Disclaimer(s):
E.g.: For Internal CDC se !nly" #ensiti$e %&t nclassi'ied(
<Project Name> Version: <1.1>
Note to t$e A%t$or
[/*is doc&ment is a template o' a Risk Management Plan doc&ment 'or a pro0ect. /*e
template incl&des instr&ctions to t*e a&t*or" ,oilerplate te1t" and 'ields t*at s*o&ld ,e
replaced +it* t*e $al&es speci'ic to t*e pro0ect.
%l&e italici2ed te1t enclosed in s3&are ,rac-ets ([te1t() pro$ides instr&ctions to t*e
doc&ment a&t*or" or descri,es t*e intent" ass&mptions and conte1t 'or content incl&ded in
t*is doc&ment.
%l&e italici2ed te1t enclosed in angle ,rac-ets (<te1t>) indicates a 'ield t*at s*o&ld ,e
replaced +it* in'ormation speci'ic to a partic&lar pro0ect.
/e1t and ta,les in ,lac- are pro$ided as ,oilerplate e1amples o' +ording and 'ormats
t*at may ,e &sed or modi'ied as appropriate to a speci'ic pro0ect. /*ese are o''ered only
as s&ggestions to assist in de$eloping pro0ect doc&ments4 t*ey are not mandatory
'ormats.
5*en &sing t*is template 'or yo&r pro0ect doc&ment" it is recommended t*at yo& 'ollo+
t*ese steps:
1. 6eplace all te1t enclosed in angle ,rac-ets (i.e." <)ro0ect 7ame>) +it* t*e correct 'ield
$al&es. /*ese angle ,rac-ets appear in ,ot* t*e ,ody o' t*e doc&ment and in *eaders and
'ooters. /o c&stomi2e 'ields in 8icroso't 5ord (+*ic* display a gray ,ac-gro&nd +*en
selected):
a. #elect File>)roperties>#&mmary and 'ill in t*e /itle 'ield +it* t*e Doc&ment
7ame and t*e #&,0ect 'ield +it* t*e )ro0ect 7ame.
,. #elect File>)roperties>C&stom and 'ill in t*e 9ast 8odi'ied" #tat&s" and :ersion
'ields +it* t*e appropriate in'ormation 'or t*is doc&ment.
c. .'ter yo& clic- !; to close t*e dialog ,o1" &pdate t*e 'ields t*ro&g*o&t t*e
doc&ment +it* t*ese $al&es ,y selecting Edit>#elect .ll (or Ctrl<.) and pressing
F=. !r yo& can &pdate an indi$id&al 'ield ,y clic-ing on it and pressing F=. /*is
m&st ,e done separately 'or >eaders and Footers.
?. 8odi'y ,oilerplate te1t as appropriate to t*e speci'ic pro0ect.
@. /o add any ne+ sections to t*e doc&ment" ens&re t*at t*e appropriate *eader and ,ody
te1t styles are maintained. #tyles &sed 'or t*e #ection >eadings are >eading 1" >eading
? and >eading @. #tyle &sed 'or ,oilerplate te1t is %ody /e1t.
A. /o &pdate t*e /a,le o' Contents" rig*t<clic- and select Bpdate 'ieldC and c*oose t*e
option< Bpdate entire ta,leC
D. %e'ore s&,mission o' t*e 'irst dra't o' t*is doc&ment" delete t*is B7otes to t*e .&t*orC
page and all instr&ctions to t*e a&t*or" +*ic* appear t*ro&g*o&t t*e doc&ment as ,l&e
italici2ed te1t enclosed in s3&are ,rac-ets.(
Revision Date: <mm!!"""">
Risk Management Plan Tem#late [Insert appropriate Disclaimer(s):
E.g.: For Internal CDC se !nly" #ensiti$e %&t nclassi'ied(
<Project Name> Version: <1.1>
TABLE O$ %ONTENTS
& INTRO!#%TION'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''&
1.1 Purpose Of Te Risk Management Plan....................................................................1
( RISK MANAGEMENT PRO%E!#RE'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''&
!.1 Pro"ess........................................................................................................................1
!.! Risk Identifi"ation......................................................................................................1
!.3 Risk #nal$sis..............................................................................................................1
!.3.1 %ualitati&e Risk #nal$sis.....................................................................................1
!.3.! %uantitati&e Risk #nal$sis...................................................................................!
!.' Risk Response Planning.............................................................................................!
!.( Risk Monitoring) *ontrolling) #nd Reporting...........................................................!
) TOOLS AN! PRA%TI%ES'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''(
RISK MANAGEMENT PLAN APPROVAL'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''')
APPEN!I* A+ RE$EREN%ES'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''',
APPEN!I* B+ KEY TERMS''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''-
Revision Date: <mm!!"""">
Risk Management Plan Tem#late [Insert appropriate Disclaimer(s):
E.g.: For Internal CDC se !nly" #ensiti$e %&t nclassi'ied(
<Project Name> Version: <1.1>
& INTRO!#%TION
&'& P#RPOSE O$ THE RISK MANAGEMENT PLAN
[)ro$ide t*e p&rpose o' t*e 6is- 8anagement )lan.(
# risk is an e&ent or "ondition tat) if it o""urs) "ould a&e a positi&e or negati&e effe"t on
a pro+e"t,s o-+e"ti&es. Risk Management is te pro"ess of identif$ing) assessing)
responding to) monitoring) and reporting risks. Tis Risk Management Plan defines o.
risks asso"iated .it te <)ro0ect 7ame> pro+e"t .ill -e identified) anal$/ed) and
managed. It outlines o. risk management a"ti&ities .ill -e performed) re"orded) and
monitored trougout te life"$"le of te pro+e"t and pro&ides templates and pra"ti"es for
re"ording and prioriti/ing risks.
Te Risk Management Plan is "reated -$ te pro+e"t manager in te Planning Pase of te
*0* 1nified Pro"ess and is monitored and updated trougout te pro+e"t.
Te intended audien"e of tis do"ument is te pro+e"t team) pro+e"t sponsor and
management.
( RISK MANAGEMENT PRO%E!#RE
('& PRO%ESS
[#&mmari2e t*e steps necessary 'or responding to pro0ect ris-.(
Te pro+e"t manager .orking .it te pro+e"t team and pro+e"t sponsors .ill ensure tat
risks are a"ti&el$ identified) anal$/ed) and managed trougout te life of te pro+e"t.
Risks .ill -e identified as earl$ as possi-le in te pro+e"t so as to minimi/e teir impa"t.
Te steps for a""omplising tis are outlined in te follo.ing se"tions. Te 2pro+e"t
manager or oter designee3 .ill ser&e as te Risk Manager for tis pro+e"t.
('( RISK I!ENTI$I%ATION
Risk identifi"ation .ill in&ol&e te pro+e"t team) appropriate stakeolders) and .ill in"lude
an e&aluation of en&ironmental fa"tors) organi/ational "ulture and te pro+e"t management
plan in"luding te pro+e"t s"ope. *areful attention .ill -e gi&en to te pro+e"t deli&era-les)
assumptions) "onstraints) 456) "ost/effort estimates) resour"e plan) and oter ke$ pro+e"t
do"uments.
# Risk Management 7og .ill -e generated and updated as needed and .ill -e stored
ele"troni"all$ in te pro+e"t li-rar$ lo"ated at 2file lo"ation3.
(') RISK ANALYSIS
#ll risks identified .ill -e assessed to identif$ te range of possi-le pro+e"t out"omes.
%ualifi"ation .ill -e used to determine .i" risks are te top risks to pursue and respond
to and .i" risks "an -e ignored.
(')'& ./"lit"tie Ris0 An"lysis
Te pro-a-ilit$ and impa"t of o""urren"e for ea" identified risk .ill -e assessed -$ te
pro+e"t manager) .it input from te pro+e"t team using te follo.ing approa":
Pro1"1ility
8ig 9 :reater tan <E0F> pro-a-ilit$ of o""urren"e
Medium 9 5et.een <@0F> and <E0F> pro-a-ilit$ of o""urren"e
Revision Date: <mm!!""""> Page &
Risk Management Plan Tem#late [Insert appropriate Disclaimer(s):
E.g.: For Internal CDC se !nly" #ensiti$e %&t nclassi'ied(
<Project Name> Version: <1.1>
7o. 9 5elo. <@0F> pro-a-ilit$ of o""urren"e
Imp"2t
8ig 9 Risk tat as te potential to greatl$ impa"t pro+e"t "ost)
pro+e"t s"edule or performan"e
Medium 9 Risk tat as te potential to sligtl$ impa"t pro+e"t "ost)
pro+e"t s"edule or performan"e
7o. 9 Risk tat as relati&el$ little impa"t on "ost) s"edule or
performan"e
Risks tat fall .itin te R;0 and <;77O4 /ones .ill a&e risk response planning .i"
ma$ in"lude -ot a risk mitigation and a risk "ontingen"$ plan.
(')'( ./"ntit"tie Ris0 An"lysis
#nal$sis of risk e&ents tat a&e -een prioriti/ed using te =ualitati&e risk anal$sis pro"ess
and teir affe"t on pro+e"t a"ti&ities .ill -e estimated) a numeri"al rating applied to ea"
risk -ased on tis anal$sis) and ten do"umented in tis se"tion of te risk management
plan.
(', RISK RESPONSE PLANNING
;a" ma+or risk >tose falling in te Red ? <ello. /ones@ .ill -e assigned to a pro+e"t
team mem-er for monitoring purposes to ensure tat te risk .ill not Afall troug te
"ra"ksB.
Cor ea" ma+or risk) one of te follo.ing approa"es .ill -e sele"ted to address it:
Aoid 9 eliminate te treat -$ eliminating te "ause
Miti3"te 9 Identif$ .a$s to redu"e te pro-a-ilit$ or te impa"t of te risk
A22ept 9 Doting .ill -e done
Tr"ns4er 9 Make anoter part$ responsi-le for te risk >-u$ insuran"e) outsour"ing) et".@
Cor ea" risk tat .ill -e mitigated) te pro+e"t team .ill identif$ .a$s to pre&ent te risk
from o""urring or redu"e its impa"t or pro-a-ilit$ of o""urring. Tis ma$ in"lude
protot$ping) adding tasks to te pro+e"t s"edule) adding resour"es) et".
Cor ea" ma+or risk tat is to -e mitigated or tat is a""epted) a "ourse of a"tion .ill -e
outlined for te e&ent tat te risk does materiali/e in order to minimi/e its impa"t.
('- RISK MONITORING5 %ONTROLLING5 AN! REPORTING
Te le&el of risk on a pro+e"t .ill -e tra"ked) monitored and reported trougout te
pro+e"t life"$"le.
# ATop 10 Risk 7istB .ill -e maintained -$ te pro+e"t team and .ill -e reported as a
"omponent of te pro+e"t status reporting pro"ess for tis pro+e"t.
#ll pro+e"t "ange re=uests .ill -e anal$/ed for teir possi-le impa"t to te pro+e"t risks.
Management .ill -e notified of important "anges to risk status as a "omponent to te
;Ee"uti&e Pro+e"t 6tatus Report.
) TOOLS AN! PRA%TI%ES
# Risk 7og .ill -e maintained -$ te pro+e"t manager and .ill -e re&ie.ed as a standing
agenda item for pro+e"t team meetings.
Revision Date: <mm!!""""> Page '
Risk Management Plan Tem#late [Insert appropriate Disclaimer(s):
E.g.: For Internal CDC se !nly" #ensiti$e %&t nclassi'ied(
I
m
p
a
c
t
H
M
L
L M H
Probability
<Project Name> Version: <1.1>
6I#; 8.7.GE8E7/ )9.7 .))6!:.9
Te undersigned a"kno.ledge te$ a&e re&ie.ed te Ris0 M"n"3ement Pl"n for te
<)ro0ect 7ame> pro+e"t. *anges to tis Risk Management Plan .ill -e "oordinated .it
and appro&ed -$ te undersigned or teir designated representati&es.
[9ist t*e indi$id&als +*ose signat&res are desired. E1amples o' s&c* indi$id&als are
%&siness #te+ard" )ro0ect 8anager or )ro0ect #ponsor. .dd additional lines 'or signat&re
as necessary. .lt*o&g* signat&res are desired" t*ey are not al+ays re3&ired to mo$e
'or+ard +it* t*e practices o&tlined +it*in t*is doc&ment.(
6ignature:
0ate:
Print Dame:
Title:
Role:
6ignature:
0ate:
Print Dame:
Title:
Role:
6ignature:
0ate:
Print Dame:
Title:
Role:
6ignature:
0ate:
Print Dame:
Title:
Role:
Revision Date: <mm!!""""> Page (
Risk Management Plan Tem#late [Insert appropriate Disclaimer(s):
E.g.: For Internal CDC se !nly" #ensiti$e %&t nclassi'ied(
<Project Name> Version: <1.1>
APPEN!I* A+ RE$EREN%ES
[Insert t*e name" $ersion n&m,er" description" and p*ysical location o' any doc&ments
re'erenced in t*is doc&ment. .dd ro+s to t*e ta,le as necessary.(
Te follo.ing ta-le summari/es te do"uments referen"ed in tis do"ument.
!o2/ment N"me
"nd Version
!es2ription Lo2"tion
<Doc&ment
7ame and
:ersion 7&m,er>
[)ro$ide description o' t*e
doc&ment(
<69 or 7et+or- pat* +*ere
doc&ment is located>
Revision Date: <mm!!""""> Page )
Risk Management Plan Tem#late [Insert appropriate Disclaimer(s):
E.g.: For Internal CDC se !nly" #ensiti$e %&t nclassi'ied(
<Project Name> Version: <1.1>
APPEN!I* B+ KEY TERMS
[Insert terms and definitions used in this document. Add rows to the table as
necessary. Follow the link below to for definitions of project management terms
and acronyms used in this and other documents.
http://www2.cdc.go/cdcup/library/other/help.htm
Te follo.ing ta-le pro&ides definitions for terms rele&ant to te Risk Management Plan.
Term !e4inition
[Insert !erm" [#roide definition of the term used in this document."
[Insert !erm" [#roide definition of the term used in this document."
[Insert !erm" [#roide definition of the term used in this document."
Revision Date: <mm!!""""> Page *
Risk Management Plan Tem#late [Insert appropriate Disclaimer(s):
E.g.: For Internal CDC se !nly" #ensiti$e %&t nclassi'ied(