RISK VS UNCERTAINTY
Manajemen Resiko Teknologi Informasi / Risk
Management of Information Technology
Maryam
Prodi Informatika
Universitas Muhammadiyah Surakarta
1
Learning Objectives
In this session,you will be able to comprehend:
− The differences between risk and uncertainty
− Types of risk
− Risk examples
Page
2
Risk vs. Uncertainty
Page
3
Risk vs. Uncertainty
“All risks are uncertain,however,
not all uncertainties are risks”
Page
4
Uncertainty - Definition
▪ Uncertainty is a lack of complete certainty.
▪ When something is not known, or
something that is not known or certain
− Outcome of any event is completely unknown
and cannot be measured, or guessed
Page
5
RISK definition
▪ Risk is
•The combination of the probability of an uncertain event and its
consequences.
Page
6
▪ Risk is an uncertain event or condition that,
if it occurs, has an effect on at least one
project objective.
− Objectives can include scope, schedule, cost,
and quality
− A risk may have one or more causes and, if it
occurs, it may have one or more impacts
▪ Project risk is always in the future.
Page
7
How a risk could arise?
▪ Risks arise because of:
− limited knowledge, experience or information
and uncertainty about the future.
− a requirement, assumption, constraint, or
condition that creates the possibility of negative
or positive outcomes
− changes in the relationships between parties
involved in an undertaking.
Page
8
Page
9
Types of risks
▪ Every risk has its own characteristics that
require particular management or analysis.
▪ Types of risks:
− Hazard (pure) risks
− Control (uncertainty) risks
− Opportunity (speculative) risks
Page
10
Types of risks
1. Hazard (pure) risks
• certain risk events that can only result in negative outcomes
• organizations will have a tolerance of hazard risks
2. Control (uncertainty) risks
• certain risks that give rise to uncertainty about the
outcome of a situation
• associated with project management
1. Opportunity (speculative) risks
• organizations deliberately take risks, especially marketplace
or commercial risks, in order to achieve a positive return
• organization will have a specific appetite for investment in
such risks
Page
11
Risk Classification System
▪ Risks can be classified according to:
− the nature of the impact, e.g. the finance of the
organization, infrastructure, reputation, etc.
− Other standards & framework
Page
12
Risk Classification System
▪ Do you still remember what risk breakdown
structure is?
Page
13
Risk likelihood (probability) & magnitude
(impact)
Page
14
Risk Importance
▪ Operations will become more efficient
− events that can cause disruption will be identified
in advance
− possible to take action in advance
▪ Processes will be more effective
− risks involved in the alternatives that may be
available
▪ Strategy will be more efficacious
− the risks associated with different strategic options
will be fully analyzed and better strategic decisions
will be reached.
− capable of delivering the required outcomes
Page
15
END