4.1 Functions

Program Manager: Principal Risk Owner for Program

Risk Board: A Non-Voting Advisory Board for assisting PM in resolving risk management issues.

Risk Manager: Performs the duties described above. The Risk Manager also is responsible for:

Writing the Risk Management Program Plan.

Identifying requirements for risk management consultants.

Providing training in risk management.

Coordinate risk management inputs for ECPs.

Coordinate risk management activities for subcontractors.

Prepare briefing materials for risk management for program manager.

4.2 Phases
The recommended approach to risk management involves three phases:

Pre-Proposal/Proposal

Start-up

Post-SDR

The emphasis will be on the risk manager's role in the discussions of these phases.

4.2.1 Pre-Proposal/Proposal
The primary functions for the risk management are:

Staging of a Proposal Manager's Risk Review for use as a proposal focus. Develop a list of concerns, and then filter the list for risks for inclusion in the risk list. A description of a typical Proposal manager's risk review is given in Appendix C.

Compile and maintain the status of the risk list.

Provide any risk training required for the proposal.

Write the inputs to the proposal re risk management.

Develop work-arounds to overcome any shortcomings of the RFP with respect to risk.

Provide whatever level of draft that is required by the RFP for the Risk Management Program Plan. If no requirement is imposed assure that at least an outline of the Risk Management Program Plan is included in the proposal.

Assure that all proposal elements are kept a breast of risk issues and status of key risks.

4.2..2 Start-Up
For the present purposes, the start-up phase is defined as that period of the program prior to the completion of the SDR. Tasks for Risk Management include:

Finalize the Risk Management Program Plan.

Develop a definition of training required, and develop a training plan.

Coordinate the Risk Management Program Plans with the risk managers for subcontractors (primary) and team members. Train these organizations as required. (Usually just have the subcontractor Risk Managers attend the training at the prime.)

Stage a Program Manager's Risk review to update the risk lists for post-award impacts .

Present the risk management approach and available results at program and technical reviews.

Coordinate the first and subsequent meetings of the Risk management Board. Issue a roles and responsibilities write-up for Board members.

Coordinate Risk management activities and actions with all standing committees and working groups (test, interface, etc.)

4.2.3 Post-SDR
The Risk Manager's primary job is to assist in the tracking of the risk management activities, and to accomplish the routine board and review functions. The Risk Manager provides a focus for risk assessment (re-review) for all ECPs. Any new risks are captured in the on-going process.

The Risk manager's job can be abolished as a special activity at any time following the start-up provided there is confidence that the risk plans are being accomplished without significant problems. The risk assessment necessary for ECPs can be delegated to the Program Management Office (or whatever function is responsible for ECPs).