Risk Assessment: Riskit Analysis Graph

1
Risk Assessment Riskit Analysis Graph

• CSEM04 Risk and Opportunities of Systems Change
  in Organisations
• Prof. Helen M Edwards

2
Overview

• Riskit Analysis Graph Background
• Riskit Analysis Graph Components
• General Examples
• Software Systems Examples
• A Riskit Analysis Graph for a Systems Change Case
  Study
• A student generated graph

3
Riskit Analysis Graph Background

• This technique belongs to the Riskit method
• Riskit was designed to manage risk during systems
  development.
• However, there is nothing in it that restricts
  its use to such a perspective.
• Kontio, J (1997) The Riskit Method for Software
  Risk Management, version 1.00, CS-TR-3782, 1997.
  Computer Science Technical Reports. University of
  Maryland.
• Available from http//www.soberit.hut.fi/jkontio/
  riskittr.pdf

4
Risk Analysis Graph
(example from the Riskit Manual)
5
Riskit Analysis Graph Components
6
General Example of Riskit Analysis Graph
Components

• Risk Factor a high cholesterol diet
• Risk Event a doctor's diagnosis of a patients
  heart problem
• Risk Outcome a diagnosed heart disease exists
• Risk Reaction treatment of heart problem
• Risk Effect hospital stay
• Utility Loss loss of time, expenses in this
  case emotional upset and disruption to normal
  life.

net effect of pain felt by individuals
SWAP TO RAG EXAMPLE SLIDES
7
General Example of Riskit Analysis Graph
Components

• Risk Factor living near a fault line of earth's
  plates
• Risk Event an earthquake
• Risk Outcome some buildings/roads destroyed
• Risk Reaction reconstruction of infrastructure
• Risk Effect cost of reconstruction
• Utility Loss loss of time, expenses
• for one individual minimal - since personal
  losses low and covered by insurance,
• for another catastrophic - since home destroyed
  and without insurance.

net effect of pain felt by individuals
8
Software Systems Example

• Risk Factor inexperience of personnel
• Risk Event a system crashes
• Risk Outcome system out of operation for up to 8
  hours
• Risk Reaction systems operational after delay,
  back up data restored
• Risk Effect added cost
• Utility Loss perceived harm experienced by
  stakeholders in this case minimal
  since only small data entry per day and
  data backed up daily

9
Software Systems Example

• Risk Factor use of new development methods
  
• Risk Event key personnel leave
• Risk Outcome personnel and competence
  shortage
• Risk Reaction recruiting initiated, staff
  reassigned
• Risk Effect two month delay
• Utility Loss perceived harm experienced by
  stakeholders in this case
  catastrophic since software delay results in
  client imposing financial penalty.

10
A Riskit Analysis Graph for a
Systems Change Case
Study
Reaction
Do nothing
Reaction
Allocate more resource
Factor
Lack of staff training
11
A Riskit Analysis Graph for a
Systems Change Case
Study (part 1)
12
A Riskit Analysis Graph for a
Systems Change Case
Study (part 2)
13
A student generated graph