Artifact: Risk List
|
A sorted list of known and open risks to the project, sorted in decreasing order of importance and associated with specific mitigation or contingency actions. |
|---|---|
| Role: | Project Manager |
| Optionality/Occurrence: | Required. Maintained throughout the project. |
| Templates and Reports: | |
| Examples: | |
| UML Representation: | Not applicable. |
| More Information: |
Purpose 
The Risk List is designed to capture the perceived risks to the success of the project. It identifies, in decreasing order of priority, the events that could lead to a significant negative outcome. It serves as a focal point for project activities and is the basis around which iterations are organized.
Timing
The Risk List is maintained throughout the project. It is created early in the Inception phase, and is continually updated as new risks are uncovered and existing risks are mitigated or retired. At a minimum, it is revisited at the end of each iteration, as the iteration is assessed.
Responsibility
The Project Manager is responsible for maintaining the Risk List and keeping it updated.
Tailoring
The Risk List should capture the critical and serious risks-if you find this list extending beyond 20, carefully consider whether they are really serious risks. Tracking more than 20 risks is an onerous task.
