Construction Project Risk Management: Strategies and Analysis

Introduction

Construction projects are initiated within a dynamic and complex environment where uncertainty and risks can arise from many different sources. Time, cost, and technological constraints in construction projects can all lead to uncertainty. Due to factors such as technological constraints, constant stakeholder involvement, large capital requirements, and improperly defined project scope, project managers may encounter a range of risks and uncertainties that lead to construction setbacks. "Risk is by nature subjective, and managing these risks subjectively could pose the danger of non-achievement of project goals. Moreover, risk analysis of the overall project also poses the danger of developing inappropriate responses" (Dey, 2002, p. 13).

Over the past years, the construction industry has changed significantly, with complex projects increasingly driven by technical and business risks. Identifying those risks is critical to managing them, and risk assessment is a tool that project managers can employ to identify and manage risks based on the project context (Klemetti, 2006). Risk management is one of the tangible project management practices that enhances the successful completion of a project. It is directly related to project success, with hazard risk identification, risk response, risk estimation, planning, and execution widely recognized as core components of the risk management process.

The objective of this study is to explore the risk management process within construction projects and the application of risk analysis techniques to enhance risk management within the construction industry.

Risk Management Requirements in Construction Projects

Risk has been defined as the consequence of uncertainty, and its exposure within a project can lead to significant project uncertainty. Risk management is an inherent part of a complex project, and managing these risks is integral to good construction management. Risk management provides a structured method of assessing and dealing with future uncertainties that may arise within a construction project. It includes identifying, analyzing, and managing uncertainty throughout the construction project lifecycle.

In the construction industry, various risk management requirements exist, and identifying these requirements is critical for successful project implementation (El-Gafy, 2008). The principal requirements for risk management in construction are risk identification, risk assessment, and risk control.

Risk identification is very critical to risk management. It assists project managers in assessing the opportunities and threats associated with a project. Brainstorming is one of the most important tools that can be employed for risk identification. Through brainstorming, it becomes possible to view risks in their broad spectrum, helping stakeholders identify both known and unknown risks that are likely to occur. Unknown risks are those that project managers and stakeholders do not anticipate. For example, a sudden rise in inflation could bring a project to a halt, since it would cause an unexpected increase in the budget. If the project owner cannot raise additional funds to complete the project, work could be brought to a standstill. Natural disasters and outbreaks of fire are other examples of unknown risks that could affect project success.

Known risks, by contrast, are risks that project stakeholders already anticipate. For example, a change in the scope of the project is a known risk that stakeholders expect may occur. After risks have been identified, the next risk management requirement is risk definition.

Risk definition refers to the probability of a risk occurring and its effect on the project. Using a Risk Rating Matrix is a basic risk management requirement that can assist project managers in defining the magnitude of risks. Table 1 below provides an example Risk Rating Matrix. By categorizing risks using this matrix, a project manager can identify high, medium, and low risks and their respective probabilities of occurrence.

Table 1: Risk Rating Matrix

Probability / Impact — No Impact | Minimal | Moderate | Major | Critical
0–10%: Low | Low | Low | Medium | Medium
11–40%: Low | Low | Medium | Medium | High
41–60%: Low | Medium | Medium | Medium | High
61–90%: Medium | Medium | Medium | Medium | High
91–100%: Medium | High | High | High | High

Risk Quantification, Planning, and Data Collection

Assigning a value to identified risks is an important part of risk management requirements. Assigning possible costs to risks helps stakeholders estimate the impact and severity of those risks. Table 2 below illustrates how financial impact can be assigned to project risk events.

Table 2: Quantifying the Costs Associated with Risks

1. Funding not approved for next year's project plan — Estimated Impact: $160,000 | Probability: 38% | Risk Amount: $135,500
2. Engineering design not compatible with the existing system — Estimated Impact: $460,000 | Probability: 62% | Risk Amount: $290,000
3. End users not adapting to new processes — Estimated Impact: $250,000 | Probability: 45% | Risk Amount: $150,000

The next step in risk management is to develop a risk plan structured around four strategic responses:

Avoid: A project owner needs to avoid risks with high impacts and high probabilities. This may require changing the project plan to eliminate the conditions that give rise to these risks.

Accept: Risks with low probability should be accepted without a need to change the project plan.

Mitigate: Risks carrying high probabilities but low impact are accepted, and measures are taken to reduce their likelihood or effect without fundamentally changing the project plan.

Transfer: Risks with low probability but high impact should be transferred to an insurer. For example, a project owner should insure assets that carry such risks.

The key to a cost-effective project lies in the availability of accurate, quality data. Good data is the starting point of risk management, and the accumulation of reliable data enhances decision-making. Data accuracy, quality, completeness, correctness, and traceability are all critical in risk management (IBM, 2009). Quality and accurate data can assist stakeholders in calculating and estimating the likelihood of project risks and the most effective methods for managing them.

Within a project, data collection should focus on both primary and secondary data to support risk management across the project lifecycle. Data collection involves searching relevant information from databases to identify the causes of risks, the methodology to identify those risks, and cost-effective methods to manage them. Secondary data can be gathered from electronic databases such as Emerald Insight, EBSCO, and Science Direct, which contain journals and research articles covering a wide range of information on risk identification and management strategies. Primary data is equally important. Both quantitative and qualitative methods are valuable in data collection. The survey method is particularly useful because it allows researchers to collect large amounts of data to evaluate project risk requirements and management strategies. Interviews are another important primary data collection method, providing rich insights that support effective risk management.

Case Study: Sydney Opera House

The Sydney Opera House is a construction project that ultimately cost the State Government of New South Wales approximately $102 million. The Opera House contains approximately 1,000 rooms, as well as a reception hall, four restaurants, extensive foyers, and bars. Many of the world's best-known construction companies participated in the project, and it took the government 14 years to complete. Before completion, several project risks emerged during the lifecycle; most notably, cost escalation drove the construction budget far beyond initial estimates. The original budget for the Sydney Opera House was $7.2 million. However, due to consistent cost escalation, the final cost to complete the project was $102 million. The government did not anticipate these cost increases during the project lifecycle, and ultimately used state lotteries to cover the additional costs.

Beyond cost escalation, another significant risk was design errors and omissions. In the original project design, the roof was too heavy to be supported by the columns. This structural issue required portions of the building to be demolished and rebuilt. While construction had initially been planned for completion within five years at a cost of $7.2 million, the risks associated with the project escalated costs to $102 million and extended the project duration to approximately 14 years.

The total risks identified as contributing to the escalation of project costs and delays included:

— Poor cost estimation
— Incomplete design
— Failure to maintain costs within budget
— Failure to meet the required completion date
— Changes in project requirements and scope
— Design changes
— Pressure from stakeholders to deliver the project more quickly
— Inaccurate contract time estimates
— Lack of communication among project stakeholders
— Inadequately defined responsibilities
— Insufficient skilled manpower
— Political risks (Eid, 2007)

The cost escalation and extended timeline of the Sydney Opera House project demonstrate that risk identification is critical to risk management in construction. Without the identification of risks, there is no basis for managing them.