Contenu connexe
Similaire à Agile risk management
Similaire à Agile risk management (20)
Plus de AgileConsortiumINT
Plus de AgileConsortiumINT (20)
Agile risk management
- 2. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
About the IARM
• The Institute for Agile Risk Management (IARM) is a Swiss based
institution that exists to promote the principles and practices of agile risk
management.
• Focus primarily on research and training activities through a network of
third parties in the agile and academic communities as well as in the
private sector.
• Publication of books and whitepapers on agile risk management and
related topics as well as appearances at public events and conferences.
• Further details can be found at http://institute.agileriskmanagement.org/
- 3. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
My Biopic
http://www.linkedin.com/in/agility
Experience spanning nearly two decades of working
in both public and private sectors. Currently
employed as an IT Manager in the Swiss public
sector and as Managing Director of the IARM.
Dr. Alan Moran MBA CITP
AgilePM, DSDM Adv. Practitioner, Scrum PSM
- 4. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Understanding Risk: Social Media Example
I was nearly finished my test when all of a sudden I was kicked out of the
system and had to enter a code to get back in (which I don't have!) I can't
restart and there is no help whatsoever! How can I get back into the test
or get my money back!!
Sorry to hear you are having problems,
we'll get right on it now!
Wow! That was a lightening response! Thanks so much! I was able to
finish the test - and passed!!! Money well spent! Thanks so much!
- 6. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Nature of Risk
• Risk culture, attitude and tolerance are defining elements of organizational
character.
• Like change, there is advantage to be found in embracing risk.
• Risk is inherent, residual and secondary
and all are intertwined in a complex
web of causality!
- 7. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Agile and Risk
• “A project risk is something that may happen and, if it does, it will have a
detrimental effect”
• Risk is “an exposure to a potentially negative outcome”
• Risk in the context of projects with “dynamic requirements” with
“customers [who] need a new system by a specific date” that is a “new
challenge for your software group”
• The “first iteration will immediately expose the risks, wherever they may
lie”
- 9. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Why Risk (Management) Matters
Not focusing on risk in projects exposes them to the following shortcomings:
• Inability to make informed risk and reward decisions.
• Failure to identify appropriate risk response strategies based on risk exposure.
• Lack of oversight in risk monitoring.
• Poor understanding of when to engage in risk activities.
- 18. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Risk Management: Risk Log Artefact
Timebox Name:
Timebox Objectives:
Timebox Start/End Dates:
ID Description Classification Likelihood Impact Score Strategy Priority Measure
Residual
Likelihood
Residual
Impact
Residual
Score
Notice anything different compared with a traditional risk list ?
- 19. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Risk Management: Risk Analysis
• Risk Exposure comprises of the following components:
– Likelihood (proxy is frequency with respect to a fixed time period)
– Impact (e.g., financial, reputation, affected customers)
– Proximity (implicit at the iteration level)
• Use T-shirting sizing against agreed scales if possible and endeavour to be
robust (e.g., use ranges)
- 22. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Risk Management: Cultural and Social Influences
There are many humanist aspects to risk management that agile project
managers need to be aware of:
• Personal attitudes towards risk.
• Risk typologies (e.g., cultural theory).
• Risk compensation effects.
These become particularly important when balancing personal and
organisational risk in culturally mixed or geo-dispersed teams.
- 25. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Risk Management: Response Treatment
• The following options are available:
– Tasks for the iteration backlog.
– Risk tagging.
– Contingency planning (conditional tasks on the backlog).
– Avoidance.
• Risk Log records risks but responses are found on the backlog or Kanban.
- 26. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Risk Management: User Story Map
User story map approach for rendering risk
distribution.
• U1: mixture of risk activities and agile practices.
• U2: relies solely on agile practices.
• U3: worth considering if the same amount of value
can be achieved with less risk.
Do you see something that might cause you concern ?
- 28. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Risk Management: Timebox Plan (DSDM)
Timebox Name:
Timebox Objectives:
Timebox Start/End Dates:
ID Description Acceptance Criteria MoSCoW Comments Assignee Type Status
R
isk
Tagging
ArchitecturalS
pike
Business
Process
M
apping
C
oding
Standards
C
ontinuous
Integration
Facilitated
W
orkshop
M
odellingPairProgram
m
ing
Prototyping
Q
uality
Function
D
eploym
ent
R
efactoring
Sim
ple
D
esign
Static
C
ode
Analysis
TestDriven
D
e
U
sage
S
-
-
-
-
-
-
-
-
- 31. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Risk Walling
Use Risk Walling to solicit and encourage continual feedback!
Timebox Name:
Timebox Objectives:
Timebox Start/End Dates:
ID Description Classification Likelihood Impact Score Strategy Priority Measure
Residual
Likelihood
Residual
Impact
Residual
Score
- 32. http://institute.agileriskmanagement.org/
Copyright © 2014. All Rights Reserved.
Become Involved!
Find out about forthcoming events (e.g., public talks, conferences, trainings)
http://institute.agileriskmanagement.org/ or follow us on LinkedIn
http://www.linkedin.com/company/institute-for-agile-risk-management/
Learn about agile risk management
http://institute.agileriskmanagement.org/publications/
Tell us about your experiences and let us know if we can help you!