The DACS Gold Practice (tm) Practice Series, Formal Risk Management speaks to the reasons risk management is more difficult than it appears.
- We have no cost/schedule risk because new technology will increase our productivity by 5-to-10 times.
- We are using a proven method, so it’s not a risk. The conference speaker said so.
- Our job is to develop software, not fill out bureaucratic forms.
- No one on the staff knows how to do risk management.
- This is development…why should we worry about supportability and maintainability risks.
- My customer doesn’t want to hear that he/she is a source of risk
- We deal with problems as they arise.
- Our customer goes ballistic whenever he/she hears of a potential problem.
- Making our risks public will kill the project.
- Give us an hour and we’ll tell you our top 10 risks.
- We have no risk.
- Using that tool is not a risk. The vendor said so.
- The project is too small to do risk management.
- New technology we’ve never used before will mitigate the risk.
It's breathtaking how many of these statements found in large and mature IT organizations.