{"id":460,"date":"2022-02-28T18:12:31","date_gmt":"2022-02-28T18:12:31","guid":{"rendered":"https:\/\/plaky.com\/learn\/?p=460"},"modified":"2026-02-11T07:45:17","modified_gmt":"2026-02-11T07:45:17","slug":"risk-in-project-management","status":"publish","type":"post","link":"https:\/\/plaky.com\/learn\/es\/project-management\/risk-in-project-management\/","title":{"rendered":"\u00bfQu\u00e9 es el riesgo en la gesti\u00f3n de proyectos?"},"content":{"rendered":"\n<p class=\"translation-block\">In project management, everything that has the potential to affect the outcome of the project is categorized as a risk.<\/p>\n\n\n\n<p class=\"translation-block\">For example, running into a resource shortage is a risk \u2014 if it happens, bad things are going to follow.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">But in <a href=\"https:\/\/plaky.com\/learn\/project-management\/what-is-project-management\/\">project management<\/a>, the term <em>risk <\/em>isn\u2019t exclusively negative. If a software that could significantly speed up the project development were to get released, it would still be categorized as a risk, albeit a positive risk \u2014 using that software could improve your timeline and allow you to finish the project sooner.<\/p>\n\n\n\n<p class=\"translation-block\">This isn\u2019t just semantics either.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Treating positive risks just like negative ones ensures that you\u2019re ready and able to take advantage of them should they occur, just as it enables you to avoid or minimize the consequences of negative risks.<\/p>\n\n\n\n<p class=\"translation-block\">In this guide, we\u2019ll teach you all you need to know about risks in project management so that you can analyze them more effectively and prepare a more thorough risk management plan. We\u2019ll focus on the elements that comprise project risks, as well as various ways in which you can categorize risks.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"512\" src=\"https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-in-project-management-cover-1024x512.png\" alt=\"Risk in project management - cover\" class=\"wp-image-7322\" srcset=\"https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-in-project-management-cover-1024x512.png 1024w, https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-in-project-management-cover-300x150.png 300w, https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-in-project-management-cover-768x384.png 768w, https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-in-project-management-cover-18x9.png 18w, https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-in-project-management-cover.png 1200w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 id=\"risk-analysis-in-project-management\" class=\"wp-block-heading translation-block\">Risk analysis in project management<\/h2>\n\n\n\n<p class=\"translation-block\">Before you can fix a problem, you have to understand it. Diagnostics are crucial for understanding problems. Just as this is true for doctors and patients, developers and software, engineers and gadgets, it also holds true for <a href=\"https:\/\/plaky.com\/learn\/project-management\/what-project-managers-do\/\">project managers<\/a> and project risks.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Risk analysis is the process by which you come to understand how, when, and to which extent the risks you\u2019ve identified pose a threat to your project.<\/strong><\/p>\n\n\n\n<div class=\"wp-block-group pro-tip\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<p class=\"translation-block\">\ud83d\udca1 <strong>Plaky Pro Tip<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">Knowing what kinds of risks exist and how they could impact your project is a huge part of building your project design. Check out the post below to learn what it takes to master project design:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\"><a href=\"https:\/\/plaky.com\/blog\/project-design\/\" target=\"_blank\" rel=\"noreferrer noopener\">What Is Project Design? We\u2019ll Help You Master It in 5 Steps<\/a><\/li>\n<\/ul>\n<\/div><\/div>\n\n\n\n<h2 id=\"elements-of-risk-in-project-management\" class=\"wp-block-heading translation-block\">Elements of risk in project management<\/h2>\n\n\n\n<p class=\"translation-block\">To help you understand a project risk, it helps to break it down into these six parts:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Risk event<\/li>\n\n\n\n<li class=\"translation-block\">Risk probability<\/li>\n\n\n\n<li class=\"translation-block\">Risk impact<\/li>\n\n\n\n<li class=\"translation-block\">Risk timeframe<\/li>\n\n\n\n<li class=\"translation-block\">Risk indicator<\/li>\n\n\n\n<li class=\"translation-block\">Risk trigger<\/li>\n<\/ul>\n\n\n\n<p class=\"translation-block\">Understanding these risk aspects will greatly aid you in preparing your risk management plan.<\/p>\n\n\n\n<h3 id=\"risk-event\" class=\"wp-block-heading translation-block\">Risk event<\/h3>\n\n\n\n<p class=\"translation-block\">To put it simply, a risk event can be described through the consequence of a risk. In other words, what (bad) things are going to happen if the risk occurs?<\/p>\n\n\n\n<p class=\"translation-block\">Examples of risk events include a hacker attack, a key employee resigning, or a lightning strike frying some electronics.<\/p>\n\n\n\n<p class=\"translation-block\">To put it another way, the thing that most people would have in mind when they say the word <em>risk <\/em>is called a risk event in project management.<\/p>\n\n\n\n<h3 id=\"risk-probability\" class=\"wp-block-heading translation-block\">Risk probability<\/h3>\n\n\n\n<p class=\"translation-block\">Not all risks are as likely to happen. It\u2019s safe to say that miscommunication or equipment malfunction happen much more frequently than lawsuits or earthquakes.<\/p>\n\n\n\n<p class=\"translation-block\">To ascertain the probability of a given risk, you just need to ask yourself how likely it is to happen.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">In most cases, risk probability boils down to guestimation.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Some project managers prefer to use percentage values, while others use descriptors like <em>highly likely <\/em>or <em>unlikely<\/em>.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Risk probability doesn\u2019t have to rely on guesswork. By conducting a quantitative risk analysis, you can arrive at more data-driven conclusions.<\/p>\n\n\n\n<h3 id=\"risk-impact\" class=\"wp-block-heading translation-block\">Risk impact<\/h3>\n\n\n\n<p class=\"translation-block\">Risk impact is the estimation of the severity of a risk\u2019s consequences. Risk impacts can range from catastrophic to inconsequential. Much like risk probability, risk impact is most often derived through estimation \u2014 in either percentages or descriptors \u2014 but, the option for a more data-driven quantitative analysis or risk impact does exist.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Risk impact and risk probability are often paired together to create the risk assessment matrix.<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">Risk assessment matrices help you assign overall threat level scores to individual risks so that you can prioritize them accordingly.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"900\" src=\"https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-assessment-matrix-example.png\" alt=\"Example of a risk assessment matrix table\" class=\"wp-image-4102\" srcset=\"https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-assessment-matrix-example.png 1200w, https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-assessment-matrix-example-300x225.png 300w, https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-assessment-matrix-example-1024x768.png 1024w, https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-assessment-matrix-example-768x576.png 768w, https:\/\/plaky.com\/learn\/wp-content\/uploads\/2022\/02\/Risk-assessment-matrix-example-16x12.png 16w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><figcaption class=\"wp-element-caption\">Example of a risk assessment matrix table<\/figcaption><\/figure>\n<\/div>\n\n\n<h3 id=\"risk-timeframe\" class=\"wp-block-heading translation-block\">Risk timeframe<\/h3>\n\n\n\n<p class=\"translation-block\">Risk timeframe is a description of when a risk can be expected to happen.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Risk management entails risk monitoring \u2014 but knowing the timeframe for any given risk is can help you focus your efforts.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">For example, a server crash due to massive online traffic is a real concern \u2014 but, it\u2019s more likely to happen during large holiday sales than on a random Wednesday afternoon.<\/p>\n\n\n\n<p class=\"translation-block\">Also, there is no need to be jumpy and keep worrying about a certain risk if it\u2019s not going to occur until the project enters <a href=\"https:\/\/plaky.com\/learn\/project-management\/phases-project-management\/\">its final phase<\/a>.<\/p>\n\n\n\n<h3 id=\"risk-indicator\" class=\"wp-block-heading translation-block\">Risk indicator<\/h3>\n\n\n\n<p class=\"translation-block\">Risk indicators are portents of impending risk events. They\u2019re the signals that indicate a risk event is looming on the horizon and that you should be prepared to react to it.<\/p>\n\n\n\n<p class=\"translation-block\">So, if the flu season rendering a large part of your workforce bedridden constitutes a schedule risk for your project, then news of cases outside the office could serve as early risk indicators.<\/p>\n\n\n\n<p class=\"translation-block\">That being said, risk indicators aren\u2019t always followed by risk events. They only serve to forewarn you of risks potentially materializing in the near future.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Let\u2019s illustrate this.<\/p>\n\n\n\n<p class=\"translation-block\">Dark clouds are an indicator of rain. Sometimes, these dark clouds pass overhead without producing so much as a droplet. But to see dark clouds and ignore the chance of rain entirely would be tantamount to turning a blind eye to a risk indicator in project management.<\/p>\n\n\n\n<h3 id=\"risk-trigger\" class=\"wp-block-heading translation-block\">Risk trigger<\/h3>\n\n\n\n<p class=\"translation-block\">A risk trigger is a switch that, when flipped, turns a potential risk into a tangible issue.<\/p>\n\n\n\n<p class=\"translation-block\">If the risk event is getting shot \u2014 excuse the violent analogy \u2014 the risk trigger would be pressing the actual trigger.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">A single risk event can have multiple risk triggers.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Also, while risk triggers are often designated during risk identification, this isn\u2019t always the case.<\/p>\n\n\n\n<p class=\"translation-block\">For effective <a href=\"https:\/\/plaky.com\/learn\/project-management\/risk-management-in-project-management\/\">risk management<\/a>, you should review risk triggers from time to time and update them if necessary.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"translation-block\">Now that we have understood the elements of risk in project management, let\u2019s see how we can categorize risks. For the purpose of this guide, we have categorized risks in project management as inherent and thematic risks.<\/p>\n\n\n\n<p class=\"translation-block\">\n<div class=\"banner banner-dark plaky-gradient-default\">\n    <div class=\"banner-text lg:pr-[6rem]\">\n        <h2 class=\"translation-block text-2xl !mb-4\">Free project management software<\/h2>\n        <p class=\"translation-block !text-sm\">Keep track of project risks and all their elements in Plaky.<\/p>\n\n        <div class=\"banner-buttons d-flex space-x-4 translation-block\">\n            <a class=\"rounded-md px-6 py-2 bg-white\" href=\"https:\/\/app.plaky.com\/signup\" target=\"_blank\">Sign up<\/a>\n\n                            <a class=\"button-2\" href=\"https:\/\/plaky.com\" target=\"_blank\">Learn more<\/a>\n                    <\/div>\n    <\/div>\n\n    <div class=\"banner-image banner-image-right \">\n        <picture>\n            <source srcset=\"https:\/\/plaky.com\/learn\/wp-content\/themes\/cake-learn\/src\/images\/plaky\/banners\/default@2x.png 2x\" alt=\"Illustration\"  media=\"(min-width: 1022px)\" \/>\n            <img decoding=\"async\" src=\"https:\/\/plaky.com\/learn\/wp-content\/themes\/cake-learn\/src\/images\/plaky\/banners\/default.png\"  alt=\"Illustration\" \/>\n        <\/picture>\n    <\/div>\n<\/div>\n    <\/p>\n\n\n\n<h2 id=\"types-of-risks-the-inherent-categorization\" class=\"wp-block-heading translation-block\">Types of risks&nbsp; \u2014 The inherent categorization<\/h2>\n\n\n\n<p class=\"translation-block\">Not all risks are made equal.<\/p>\n\n\n\n<p class=\"translation-block\">Just to name some of the more prominent types of inherent risks, we have:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Positive and negative risks<\/li>\n\n\n\n<li class=\"translation-block\">Known and unknown risks<\/li>\n\n\n\n<li class=\"translation-block\">Primary risks, secondary risks, and residual risks<\/li>\n<\/ul>\n\n\n\n<p class=\"translation-block\">Understanding these risk categorizations will help improve the execution and effectiveness of your risk management plan.<\/p>\n\n\n\n<p class=\"translation-block\">On top of this, we can also divide risks into any number of thematic categories, like cost risks, technology risks, strategic risks, and so on. Further below we\u2019ve provided 15 examples of thematic risk categories that are aimed to help you identify more risks.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">These thematic risk types are different from inherent risk types in that they aren\u2019t as well defined and often feature overlap. <strong>With inherent risks, a risk is either known or unknown, positive or negative, primary or secondary \u2014 there is no middle ground.<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">We should also note that the inherent and thematic risk categories aren\u2019t mutually exclusive. Namely, you <em>can<\/em> attribute descriptors from each category to a risk.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">For example, it\u2019s possible to have a negative, known, secondary technological risk.<\/p>\n\n\n\n<h3 id=\"positive-and-negative-risks\" class=\"wp-block-heading translation-block\">Positive and negative risks<\/h3>\n\n\n\n<p class=\"translation-block\">The first category divides all risks into positive and negative ones.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Positive risks<\/strong><strong><em> <\/em><\/strong>are those risks that, if they happen, will have a positive impact on the project. They help you finish the project quicker, make it cost less, or have any other positive effect.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Negative risks <\/strong>are those risks that, if they happen, will have a negative impact on the project. They make you <a href=\"https:\/\/plaky.com\/blog\/missed-deadlines-guide\/\" target=\"_blank\" rel=\"noreferrer noopener\">miss the deadline<\/a>, incur extra costs, lower the quality of the product, and so on.<\/p>\n\n\n\n<h3 id=\"known-risks-and-unknown-risks\" class=\"wp-block-heading translation-block\">Known risks and unknown risks<\/h3>\n\n\n\n<p class=\"translation-block\">The main advantage of risk management is the ability to take a proactive approach to managing risks.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">However, you can only proactively manage the risks that you\u2019ve identified. Even with extensive risk management and the best PM helming the project, an unknown risk will force the team to respond to it reactively.<\/p>\n\n\n\n<p class=\"translation-block\">These two risk response types \u2014 proactive and reactive \u2014 constitute the first paradigm for categorizing risks.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Known risks<\/strong> are those you can manage proactively. They are the risks you\u2019ve predicted and accounted for by, among other things, defining their risk event, probability, impact, etc.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Unknown risks<\/strong> are those that demand a reactive response because you\u2019ve failed to predict them. They spring out of nowhere and leave you scratching your head, wondering what happened. Sadly, the only way to learn what unknown risks are is to fall victim to them.<\/p>\n\n\n\n<p class=\"translation-block\">Some project managers choose to call risks <em>unknowns<\/em>, leading to the existence of confusing terminologies such as known and unknown unknowns. The reasoning behind this is that, while you may predict that a product will encounter bugs during testing, you don\u2019t know how these bugs will manifest \u2014 they are known unknowns. And if you get hit by a lawsuit that you didn\u2019t see coming, well that\u2019s an unknown unknown. It\u2019s confusing, and we don\u2019t recommend using this terminology \u2014 but you can encounter it so it&#8217;s good to be equipped with this knowledge.<\/p>\n\n\n\n<p class=\"translation-block\">Each project starts with a few known risks and plenty of unknown ones, but as you progress with risk management planning, the known risks should greatly outnumber the unknown ones. In an ideal case, you\u2019d identify all potential risks, leaving the percentage of unknown risk at 0%.<\/p>\n\n\n\n<h3 id=\"primary-risks-residual-risks-and-secondary-risks\" class=\"wp-block-heading translation-block\">Primary risks, residual risks, and secondary risks<\/h3>\n\n\n\n<p class=\"translation-block\">In a category of their own, we have primary risks, secondary risks, and <a href=\"https:\/\/www.simplilearn.com\/residual-risk-vs-secondary-risk-article\">residual risks<\/a>.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Primary risks <\/strong>are the risks you\u2019ve identified and designated with a risk event, probability, impact, and so on. Unless stated otherwise, assume that the term <em>risk <\/em>implies primary risks, just as it usually implies negative risks.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Secondary risks<\/strong> are those risks that stem as a consequence of risk management implementation. In other words, risks that occur as a consequence of responding to a primary risk are called secondary risks.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Let\u2019s say you switch to using a new team communication tool to reduce costs only to have it be plagued with crashes and downtime. The issue \u2014 crashes and downtime \u2014 are something that would have never occurred if not for your risk management efforts, making them the impact of a secondary risk.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Residual risks<\/strong> are the threat that remains even after you\u2019ve implemented your risk response plan. Mathematically, they could be expressed as:<\/p>\n\n\n\n<p class=\"has-text-align-center has-background translation-block\" style=\"background-color:#e5f6fe\"><strong>Residual risk = risk &#8211; risk response<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">To give a concrete example, let\u2019s say you impose contractual penalties upon the shipping company responsible for delivering your product to retailers. These penalties reduce risk probability, but not risk impact. Therefore, this risk response plan leaves you with some residual risk.<\/p>\n\n\n\n<p class=\"translation-block\">Now if the risk you\u2019re combatting is equipment malfunction, and your risk response includes having redundant equipment on standby, then the residual risk is low or non-existent.<\/p>\n\n\n\n<p class=\"translation-block\">Residual risks and secondary risks are often mixed together, but they are fundamentally different.&nbsp;<\/p>\n\n\n\n<h2 id=\"types-of-risks-the-thematic-categorization\" class=\"wp-block-heading translation-block\">Types of risks \u2014 The thematic categorization<\/h2>\n\n\n\n<p class=\"translation-block\"><strong>You\u2019ll often hear that the three types of project risks are cost risks, schedule risks, and performance risks.<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">This division is perfectly valid, as it closely ties to the <a href=\"https:\/\/plaky.com\/learn\/project-management\/project-constraints\/#What_are_the_triple_constraints_of_project_management\" target=\"_blank\" rel=\"noreferrer noopener\">triple constraint theory<\/a> which states that the project budget, timeline, and scope are linked to project quality and that a change to any one of them will affect the others.<\/p>\n\n\n\n<p class=\"translation-block\">But, limiting yourself to only these three risk categories doesn\u2019t really help you identify risks any easier. Therefore, we like to place them into a category of thematic risks. This isn\u2019t an official PM term, but we call them <strong>thematic<\/strong> as this name evokes the sense of direction from which risks can emerge.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">So, to facilitate your risk identification process, we\u2019ve provided 15 different thematic categories that risks could fall under:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Cost risks<\/li>\n\n\n\n<li class=\"translation-block\">Schedule risks<\/li>\n\n\n\n<li class=\"translation-block\">Performance risks<\/li>\n\n\n\n<li class=\"translation-block\">Scope creep risks<\/li>\n\n\n\n<li class=\"translation-block\">Communication risks<\/li>\n\n\n\n<li class=\"translation-block\">Security risks<\/li>\n\n\n\n<li class=\"translation-block\">Health and safety risks<\/li>\n\n\n\n<li class=\"translation-block\">Technology risks<\/li>\n\n\n\n<li class=\"translation-block\">Resource risks<\/li>\n\n\n\n<li class=\"translation-block\">Strategic risks<\/li>\n\n\n\n<li class=\"translation-block\">Operational risks<\/li>\n\n\n\n<li class=\"translation-block\">Legal\/regulatory risks<\/li>\n\n\n\n<li class=\"translation-block\">Market risks<\/li>\n\n\n\n<li class=\"translation-block\">External hazard risks<\/li>\n\n\n\n<li class=\"translation-block\">Project deferral risks<\/li>\n<\/ul>\n\n\n\n<p class=\"translation-block\">One of the best ways to improve your <a href=\"https:\/\/plaky.com\/learn\/project-management\/project-management-skills\/\">risk identification skills<\/a> is by going through this list and finding as many risks for each category. This allows you to comb through a wider range of risks than you could without using such a structured approach.<\/p>\n\n\n\n<p class=\"translation-block\">You\u2019ll frequently find that some examples of risks given to portray risk categories could fall under several categories.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">For example, a product name dispute lawsuit could be <strong>a cost risk<\/strong> (regardless of whether you win or lose the lawsuit), <strong>a schedule risk<\/strong> (if you are forced to push back the product release due to the lawsuit), or even <strong>performance risks<\/strong> (in cases where the attention of the general public gets drawn to it), in addition to being <strong>a legal risk<\/strong>.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\"><strong>So, there can be overlap<\/strong>.<\/p>\n\n\n\n<p class=\"translation-block\">Provided below are some of the more common risk categories that will help guide your risk identification efforts in the right direction, starting with the three most common ones.<\/p>\n\n\n\n<h3 id=\"cost-risks\" class=\"wp-block-heading translation-block\">Cost risks<\/h3>\n\n\n\n<p class=\"translation-block\">Cost risks are <strong>all risks that have the potential to make you go over budget (or under budget, if we\u2019re also taking positive risks into consideration)<\/strong>.<\/p>\n\n\n\n<p class=\"translation-block\">From the very outset, poor <a href=\"https:\/\/plaky.com\/blog\/project-management-budgeting-methods\/\">budget planning<\/a>, and sloppy execution are bound to leave their mark on a project. Let\u2019s take the infamous <a href=\"https:\/\/www.nao.org.uk\/wp-content\/uploads\/2011\/07\/10121272.pdf\">FiReControl<\/a> project as an example. The goal of the project was to develop control hubs for the fire brigade in England. The original cost estimate of the project was \u00a3120 million, but at one point threatened to cost \u00a3635 million.<\/p>\n\n\n\n<p class=\"translation-block\">How did this happen? <\/p>\n\n\n\n<p class=\"translation-block\">Apparently, the department in charge of the project thought IT development would be smooth sailing and began the endeavor with quite unrealistic expectations \u2014 which quickly built costs.&nbsp;&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">And that\u2019s just one example. Plus, poor budgeting isn\u2019t always the root cause of the problem. Scheduling issues often also constitute a cost risk, as the people working on the project need to be compensated for their prolonged work.<\/p>\n\n\n\n<h3 id=\"schedule-risks\" class=\"wp-block-heading translation-block\">Schedule risks<\/h3>\n\n\n\n<p class=\"translation-block\">Likewise, schedule risks are <strong>all risks that affect the <a href=\"https:\/\/plaky.com\/learn\/project-management\/project-timeline\/\">project timeline<\/a><\/strong>. Implementing a new piece of software or equipment that can help in reaching <a href=\"https:\/\/plaky.com\/learn\/project-management\/deliverable-in-project-management\/\">the project deliverables<\/a> sooner is one example of <strong>a positive schedule risk<\/strong>.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">In most cases, though, you\u2019ll be dealing with negative schedule risks:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Flu season leaving your workforce temporarily halved,&nbsp;<\/li>\n\n\n\n<li class=\"translation-block\">Questionably competent shipping companies failing to get the product to retail shelves in time, or&nbsp;<\/li>\n\n\n\n<li class=\"translation-block\">Equipment malfunctions mandating a halt in production.<\/li>\n<\/ul>\n\n\n\n<h3 id=\"performance-risks\" class=\"wp-block-heading translation-block\">Performance risks<\/h3>\n\n\n\n<p class=\"translation-block\">Performance risks don\u2019t have to do with the performance of the team working on the project \u2014 this falls under schedule risks.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Instead, <strong>performance risks are all about the quality of the project deliverables<\/strong>.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Anything that can impact the desired quality level of the project deliverables is a performance risk:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">High employee turnover,&nbsp;<\/li>\n\n\n\n<li class=\"translation-block\">High costs, or<\/li>\n\n\n\n<li class=\"translation-block\">Stretched resources.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p class=\"translation-block\">Sometimes, schedule risks bleed over into performance risks, which is often the case with a time crunch.<\/p>\n\n\n\n<h3 id=\"scope-creep-risks\" class=\"wp-block-heading translation-block\">Scope creep risks<\/h3>\n\n\n\n<p class=\"translation-block\">Let\u2019s say you\u2019re trying to make an ultra-durable smartphone. Outside of making it waterproof, dustproof, and otherwise resistant to the elements, the smartphone isn\u2019t supposed to have any fancy features. Everything is agreed upon and the project gets underway.<\/p>\n\n\n\n<p class=\"translation-block\">Then, a call gets made to add support for a smart assistant or to add a gyroscope \u2014 something that wasn\u2019t part of the agreed-upon project scope. This is a classic case of <a href=\"https:\/\/plaky.com\/learn\/project-management\/scope-creep-in-project-management\/\">scope creep<\/a> \u2014 <strong>the requirements increase after the plan has already been made<\/strong>.<\/p>\n\n\n\n<p class=\"translation-block\">The addition of new features is one of the more common causes of scope creep, but it can also come about as a result of poor communication with <a href=\"https:\/\/plaky.com\/learn\/project-management\/stakeholder-in-project-management\/\">stakeholders<\/a>, having a poorly defined project scope in the first place, or any other reason.<\/p>\n\n\n\n<p class=\"translation-block\">\n<div class=\"banner banner-dark plaky-gradient-landing-1\">\n    <div class=\"banner-text lg:pr-[6rem]\">\n        <h2 class=\"translation-block text-2xl !mb-4\">Free project management software<\/h2>\n        <p class=\"translation-block !text-sm\">Keep scope creep at bay while improving project workflows with Plaky.<\/p>\n\n        <div class=\"banner-buttons d-flex space-x-4 translation-block\">\n            <a class=\"rounded-md px-6 py-2 bg-white\" href=\"https:\/\/app.plaky.com\/signup\" target=\"_blank\">Sign up<\/a>\n\n                            <a class=\"button-2\" href=\"https:\/\/plaky.com\" target=\"_blank\">Learn more<\/a>\n                    <\/div>\n    <\/div>\n\n    <div class=\"banner-image banner-image-bottom \">\n        <picture>\n            <source srcset=\"https:\/\/plaky.com\/learn\/wp-content\/themes\/cake-learn\/src\/images\/plaky\/banners\/landing-1@2x.png 2x\" alt=\"Illustration\"  media=\"(min-width: 1022px)\" \/>\n            <img decoding=\"async\" src=\"https:\/\/plaky.com\/learn\/wp-content\/themes\/cake-learn\/src\/images\/plaky\/banners\/landing-1.png\"  alt=\"Illustration\" \/>\n        <\/picture>\n    <\/div>\n<\/div>\n    <\/p>\n\n\n\n<h3 id=\"communication-risks\" class=\"wp-block-heading translation-block\">Communication risks<\/h3>\n\n\n\n<p class=\"translation-block\">You could have the most skilled workers in the world, but that wouldn\u2019t matter one bit if the work they\u2019re doing is based on miscommunication. Theoretical frameworks of <a href=\"https:\/\/pumble.com\/learn\/communication\/communication-importance\/#What_are_the_components_of_the_team_communication_process\">communication<\/a> break this process down into at least 8 elements:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Sender<\/li>\n\n\n\n<li class=\"translation-block\">Message<\/li>\n\n\n\n<li class=\"translation-block\">Encoding<\/li>\n\n\n\n<li class=\"translation-block\">Noise<\/li>\n\n\n\n<li class=\"translation-block\">Channel<\/li>\n\n\n\n<li class=\"translation-block\">Receiver<\/li>\n\n\n\n<li class=\"translation-block\">Decoding<\/li>\n\n\n\n<li class=\"translation-block\">Feedback<\/li>\n<\/ul>\n\n\n\n<p class=\"translation-block\">As you can see, there are plenty of stops along the way where the intended meaning can get distorted. Perhaps you won\u2019t phrase it properly (encoding), you\u2019ll opt for verbal communication for complex ideas where a message would have been more apt (channel), or maybe the message recipient will simply interpret the message incorrectly (decoding).<\/p>\n\n\n\n<p class=\"translation-block\">Miscommunication can occur between the PM and stakeholders, the project team, or any other party.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">The important thing to remember is that communication risks can easily happen in any project and that their impact can range from negligible to quite problematic.<\/p>\n\n\n\n<p class=\"translation-block\">To avoid communication risks, you could establish communication protocols, like asking the message recipient to reiterate what they\u2019ve heard. It will feel a bit unnatural at first, but you\u2019ll quickly get used to it.&nbsp;<\/p>\n\n\n\n<h3 id=\"security-risks\" class=\"wp-block-heading translation-block\">Security risks<\/h3>\n\n\n\n<p class=\"translation-block\"><strong>Anything that can lead the project deliverables to suffer from prying eyes (and hands) is a security risk<\/strong>.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Information leaks, hacks, or even theft, are all security risks that can negatively impact projects.<\/p>\n\n\n\n<p class=\"translation-block\">As an example of a security risk, let\u2019s look back to the spring of 2020, when the hotly anticipated sequel to PlayStation\u2019s hit video game <em>The Last of Us<\/em> was gearing up for release.<\/p>\n\n\n\n<p class=\"translation-block\">Months ahead of the game\u2019s release, the plot of the game was leaked, causing a large controversy over the death of a fan-favorite character. <\/p>\n\n\n\n<p class=\"translation-block\">The game went on to be a critical and commercial success despite this setback \u2014 but needless to say, the road to get there was less than ideal, due to breached security.<\/p>\n\n\n\n<h3 id=\"health-and-safety-risks\" class=\"wp-block-heading translation-block\">Health and safety risks<\/h3>\n\n\n\n<p class=\"translation-block\"><strong>Safety and health risks constitute all risks that could endanger the safety of workers and\/or consumers.&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">For example, a risk with mercury-in-glass thermometers was that, should they break, the consumers would be exposed to mercury. This is why everyone avoids that risk and makes electronic thermometers nowadays.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Nowadays, a&nbsp; common safety risk is the presence of toxic elements used in most QLED displays. Although Samsung has made QLED TVs <a href=\"https:\/\/www.sammobile.com\/2017\/09\/20\/samsung-reportedly-struggling-increase-sales-quantum-dot-tvs\/\">without these elements<\/a> \u2014 making them 100% safe for consumers \u2014 the sales are still low due to the negative public perception of the technology as a whole.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">In this case, we can see that health and safety risks can cause a problem for projects even when there aren\u2019t actually any health and safety risks involved.<\/p>\n\n\n\n<p class=\"translation-block\">Failing to account for such risks will negatively reflect on the project, either by:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Incurring extra costs to pay for medical treatment of employees,&nbsp;<\/li>\n\n\n\n<li class=\"translation-block\">Muddying the company\u2019s brand, or&nbsp;<\/li>\n\n\n\n<li class=\"translation-block\">Affecting your bottom line if you associate your product with \u201cthe wrong crowd\u201d.<\/li>\n<\/ul>\n\n\n\n<h3 id=\"technology-risks\" class=\"wp-block-heading translation-block\">Technology risks<\/h3>\n\n\n\n<p class=\"translation-block\"><strong>Technology risks include a plethora of different risks intended to help guide your risk identification efforts in the right direction.<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">This is because anything relating to technology can be seen as a technology risk. Some of these risks could even be labeled under multiple categories.<\/p>\n\n\n\n<p class=\"translation-block\">For example, data security issues can be seen as both technology risks and legal\/regulatory risks.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\"><strong>Technology risks also include service outages, like your cloud storage provider losing your data or your server provider failing to maintain uptime on your website.<\/strong><\/p>\n\n\n\n<p class=\"translation-block\"><strong>New software implementation is often perceived as a risk due to the costs associated with it, as well as the need to train employees to use said software.<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">All of the previously mentioned examples refer to <em>forces outside your influence<\/em>, so to speak, but technology risks aren\u2019t always someone else\u2019s fault.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">If you roll out a software product that suffers from frequent crashes, it can take months to repair the PR damage after fixing the crashes.<\/p>\n\n\n\n<h3 id=\"resource-risk\" class=\"wp-block-heading translation-block\">Resource risk<\/h3>\n\n\n\n<p class=\"translation-block\"><strong>Resource risks are exactly what they sound like \u2014 risks that threaten to prevent you from completing a project (or keeping it on track) due to a shortage or unavailability of essential resources.&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">Imagine if you needed to make and ship out 50 million gaming consoles but a shortage of microprocessors bottlenecked your production.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">This is a resource risk, and you can tackle in the following ways:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Prolong the development \u2014 which would affect your timeline<\/li>\n\n\n\n<li class=\"translation-block\">Use a different type of microprocessor \u2014 which would affect the quality of your product and your projected ROI<\/li>\n\n\n\n<li class=\"translation-block\">Proceed as planned and ship our fewer units \u2014 which would reduce your overall profits.<\/li>\n<\/ul>\n\n\n\n<p class=\"translation-block\">In any case, categorizing this (and all similar cases) as a resource risk is much more conducive to risk identification and risk response planning than if you were to limit yourself only to cost, schedule, and performance risks.<\/p>\n\n\n\n<h3 id=\"strategic-risks\" class=\"wp-block-heading translation-block\">Strategic risks<\/h3>\n\n\n\n<p class=\"translation-block\"><strong>Most companies have a clear strategic vision when they commence work on a project \u2014 and if they don\u2019t, they should. The project deliverable and the strategic vision of the project can be two separate things<\/strong>.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">For example, a project deliverable could be to develop and maintain a cloud storage service.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">And, here are three very different strategic goals for this project:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li class=\"translation-block\">To develop an in-house cloud infrastructure that the company can use for their other projects and services.<\/li>\n\n\n\n<li class=\"translation-block\">To leverage affordable plans to amass popularity, attracting other companies to it who would like to use your cloud storage for their products.<\/li>\n\n\n\n<li class=\"translation-block\">To increase your sales by 15% over the next year.<\/li>\n<\/ol>\n\n\n\n<p class=\"translation-block\">The product being developed could be exactly the same in all cases, but you would have to react to external stimuli differently depending on your strategic goal.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">For example, if a new competitor were to blast onto the market with an amazing cloud infrastructure, you\u2019d feel much worse about it with number 2 and 3 strategic goals than with the number 1 goal.<\/p>\n\n\n\n<h3 id=\"operational-risk\" class=\"wp-block-heading translation-block\">Operational risk<\/h3>\n\n\n\n<p class=\"translation-block\"><strong>Operational risks include any issue that stems from the company\u2019s business as usual.&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">Perhaps the workflow is just not efficient enough to accommodate the needs of the project. This may require some changes, but changes bring with them their own operational risks.<\/p>\n\n\n\n<p class=\"translation-block\">This can include changes in:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"translation-block\">Management<\/li>\n\n\n\n<li class=\"translation-block\">Software used<\/li>\n\n\n\n<li class=\"translation-block\">Communication guidelines<\/li>\n\n\n\n<li class=\"translation-block\">Business strategy<\/li>\n\n\n\n<li class=\"translation-block\">Team roles<\/li>\n\n\n\n<li class=\"translation-block\">Leadership<\/li>\n<\/ul>\n\n\n\n<p class=\"translation-block\">The result of any of these changes will likely be confusion and adjustment periods, during which the project will not get its timeline paused.<\/p>\n\n\n\n<h3 id=\"legal-regulatory-risks\" class=\"wp-block-heading translation-block\">Legal\/regulatory risks<\/h3>\n\n\n\n<p class=\"translation-block\">We\u2019ve mentioned legal\/regulatory risks as part of other categories, but they really are deserving of their own category. They are also a broad category \u2014 <strong>legal trouble can come from the state, from competitors, unrelated third parties who aren\u2019t even competitors, or even the organization\u2019s employees<\/strong>.<\/p>\n\n\n\n<p class=\"translation-block\"><strong>S<\/strong>imilar to legal risks are <a href=\"https:\/\/www.pwc.com\/la\/en\/risk-assurance\/regulatory-risk-management.html#:~:text=Regulatory%20Risk%20is%20generally%20defined,economic%20value%20of%20an%20enterprise.\"><strong>regulatory risks<\/strong><\/a><strong> are \u2014 but they\u2019re more focused on the product than the company<\/strong>.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">This is especially the case with many innovative IT projects that depend on data security and privacy protection. When developing something new, there is always a chance that the project deliverable is going to be at odds with some regulations.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">For example, if you\u2019re selling your product in different countries, you need to account for their varied laws.<\/p>\n\n\n\n<p class=\"translation-block\">In other words, the trouble with legal and regulatory risks is that they can stop the project dead in its tracks, which is why it\u2019s crucial to consider how any project fits into the legal and regulatory constraints in their markets.<\/p>\n\n\n\n<h3 id=\"market-risks\" class=\"wp-block-heading translation-block\">Market risks<\/h3>\n\n\n\n<p class=\"translation-block\"><strong>Every project product can be made to look great in a vacuum. In all likelihood, it will be competing against other, sometimes more popular and well-established, competition.<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">Unfortunately, it\u2019s often not enough to simply make a good product or offer a good service and expect the rest to work itself out. A project geared for success will take the volatility of market changes into consideration.<\/p>\n\n\n\n<p class=\"translation-block\">Remember that a risk isn\u2019t necessarily a bad thing in project management. You should be ready to respond to positive market risks that can undermine your competition.<\/p>\n\n\n\n<h3 id=\"external-hazard-risks\" class=\"wp-block-heading translation-block\">External hazard risks<\/h3>\n\n\n\n<p class=\"translation-block\"><strong>External hazard risks are a perfect example of risks you cannot prevent.&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"translation-block\"><strong>All you can do in the face of storms, floods, and earthquakes is have a solid response plan in action.&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">Not having your office on the ground floor helps mitigate the negative effects of floods, for example.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Setting up shop in an aseismic building can greatly reduce the impact of earthquakes on your project.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">And having a server room power generator can help projects stay on track even through power outages that frequently accompany storms.<\/p>\n\n\n\n<p class=\"translation-block\">These are just a few ideas of what constitutes an external hazard risk and how one might go about dealing with them.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Do keep in mind that external hazard risks aren\u2019t limited to natural disasters \u2014 armed robberies or terrorist attacks could also be categorized here.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Not every project needs a response plan for all external hazards \u2014 but it\u2019s best to stay aware of these things.<\/p>\n\n\n\n<h3 id=\"project-deferral-risks\" class=\"wp-block-heading translation-block\">Project deferral risks<\/h3>\n\n\n\n<p class=\"translation-block\"><strong>Project deferral risks are all risks that can stem from a project being put on hold.<\/strong><\/p>\n\n\n\n<p class=\"translation-block\">Leadership greenlights projects, but it also has the power to put them on hold for whatever reason.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">But not all projects handle being put on hold equally.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Some projects get exponentially more expensive as they get prolonged.&nbsp;<\/p>\n\n\n\n<p class=\"translation-block\">Others may suffer from a limited window of opportunity to achieve their maximum effectiveness.<\/p>\n\n\n\n<p class=\"translation-block\">For these reasons, understanding how big of a risk deferral poses to your project is crucial and can offset some of the drawbacks associated with said deferral.<\/p>\n\n\n\n<h2 id=\"conclusion-understanding-project-risk-is-simple-but-identifying-risks-is-difficult\" class=\"wp-block-heading translation-block\">Conclusion: Understanding project risk is simple, but identifying risks is difficult<\/h2>\n\n\n\n<p class=\"translation-block\">It only takes one sentence to define risk in project management:<\/p>\n\n\n\n<p class=\"translation-block\">Risk is anything that can affect the project, either positively or negatively.<\/p>\n\n\n\n<p class=\"translation-block\">But knowing what risk is and how to identify it and mitigate it are as different as knowing what a computer is and knowing how to fix one.<\/p>\n\n\n\n<p class=\"translation-block\">Keeping the 7 types of inherent risks and 15 thematic risk categories listed in this guide with the examples we\u2019ve provided will help you identify a larger pool of risk for your projects.&nbsp;<\/p>\n\n\n\n<p class=\"custom-btn translation-block\"><a href=\"https:\/\/app.plaky.com\/signup)\" target=\"_blank\" rel=\"noreferrer noopener\">Get started with Plaky<\/a><\/p>\n\n\n\n<p class=\"has-background translation-block\" style=\"background-color:#e5f6fe\">\ud83d\udcd6 Risk is just one of the terms that doesn\u2019t have an identical meaning in project management from its standard dictionary definition. You can learn more about similar terms, and many others, from our <a href=\"https:\/\/plaky.com\/learn\/glossary\/\" target=\"_blank\" rel=\"noreferrer noopener\">Project Management Glossary of Terms<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Comprender el riesgo es esencial para una gesti\u00f3n eficaz. Aprende todo sobre los riesgos del proyecto aqu\u00ed.<\/p>","protected":false},"author":6,"featured_media":7323,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[6,4],"tags":[],"class_list":["post-460","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-basic-terminology","category-project-management"],"acf":[],"_links":{"self":[{"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/posts\/460","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/comments?post=460"}],"version-history":[{"count":33,"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/posts\/460\/revisions"}],"predecessor-version":[{"id":11648,"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/posts\/460\/revisions\/11648"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/media\/7323"}],"wp:attachment":[{"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/media?parent=460"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/categories?post=460"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/plaky.com\/learn\/es\/wp-json\/wp\/v2\/tags?post=460"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}