Agile Risk and Uncertainty Management Foundations

Agile Risk and Uncertainty Management Foundations is the set of concepts describing how a team identifies, tracks, and responds to things that could threaten a project's success, providing a structured counterpart to agile's general comfort with uncertainty established among the earliest agile foundations. While empiricism and adaptive planning accept that a project's understanding will improve over time, not every uncertainty resolves favorably on its own, and this foundation addresses the deliberate practices used to manage the specific uncertainties and problems that could otherwise derail a project if left unaddressed.

This foundation distinguishes between a risk, a potential future problem that has not yet occurred, an assumption, a belief treated as true without full confirmation, and an issue, a problem that has already materialized, since each calls for a different kind of attention. It also covers the specific properties used to characterize and prioritize risks, and the accountability and response practices used to actually manage them once identified.

Distinguishing Types of Uncertainty

Agile Risk and Uncertainty Management Definition

Agile risk and uncertainty management is the practice of identifying, characterizing, and responding to potential problems and unconfirmed beliefs that could affect a project's outcome, applied continuously throughout a project rather than only during upfront planning.

Project Risk Definition

A project risk is a potential future event or condition that, if it occurs, would have a negative effect on the project, distinguished from a certainty by the fact that it has not yet happened and may never happen at all.

Project Assumption Definition

A project assumption is a belief treated as true for planning purposes without having been fully confirmed, made explicit so that its accuracy can be checked and its implications understood should it later prove incorrect.

Project Issue Definition

A project issue is a problem that has already occurred and is actively affecting the project, distinguished from a risk by having already materialized rather than remaining a future possibility.

Characterizing a Risk

Risk Probability Definition

Risk probability is the estimated likelihood that a given risk will actually occur, providing one of the two core factors used to judge how much attention a risk deserves.

Risk Impact Definition

Risk impact is the estimated severity of the negative effect a risk would have on the project if it did occur, providing the second core factor alongside probability used to characterize a risk.

Risk Exposure Definition

Risk exposure combines probability and impact into a single measure of overall concern, used to compare and prioritize different risks against one another.

Risk Appetite Definition

Risk appetite is the general level of risk a project or organization is willing to accept in pursuit of its objectives, providing the threshold against which a given risk's exposure is judged acceptable or requiring further response.

Responding to and Owning Risk

Risk Response Definition

A risk response is the specific action taken to address a given risk, ranging from actively reducing its probability or impact to deliberately accepting it as within the project's risk appetite.

Risk Owner Definition

A risk owner is the person accountable for monitoring a specific risk and ensuring its response is carried out, providing clear ownership so that identified risks do not go unmanaged simply because no one individual is responsible for them.