The risk level of a project ought to be determined at the outset of a project. According to the Ten Golden Rules of Project Risk Management, this step is important to complete at the beginning of a project because this is when there is plenty of time to resolve potential risks. It also allows you to maintain a risk reserve for your project.
Determining risk may not seem a straight forward enterprise, but often project documents already contain information about perceived risks for a project. Documents to consult include the project charter and resource documents. In addition, you will want to consult project team members as well as those who are experienced with similar projects. In the case of technological risks or risks to the environment or health risks, you may want to hire an expert in the field.
Once identified, risks need prioritizing. The priority of risks is determined by calculating the likelihood of the risk and the potential impact of each risk. Risks with the highest likelihood and impact are risks with the highest priority. Risks that are unlikely to manifest or have a large impact receive the lowest priority.
Once the risks are prioritized, then they can be analyzed. Analysis of risk involves looking at potential effects of an actualized risk and looking at ways to prevent such a risk from occurring. Software exists to in creating a project management plan that incorporates risk analysis. The final step is to type up the risk analysis into a risk register.