Course overview
A risk management plan is the working document that sits between a policy nobody reads and an incident nobody expected. It states what could go wrong in this specific undertaking, how likely it is, what will be done about it, who is doing it, what it costs, and what will trigger a different response. Done properly, it is short, specific and used weekly. Done badly, it is a spreadsheet of thirty generic risks copied from the last project, opened once at kickoff and never again.
This course covers the plan end to end: the foundations and scope, identification and assessment technique, mitigation and response strategy, implementation and monitoring, and the culture of reporting problems early enough to fix them. It draws on ISO 31000 and on established project risk practice.
Where plans go wrong
Most failures are visible in the first page. Risks are written as topics ("resourcing", "supplier") instead of as events with a cause and a consequence, so no response can be designed. Every risk is assigned to the project manager, which means none of them is owned. Mitigations are listed with no cost, no date and no capacity, so they are aspirations. And the plan has no trigger points, so the team discovers the risk has materialized when it is already an issue.
The corrective is unglamorous: precision in the risk statement, a named owner with authority, a funded response, and a defined threshold that forces a decision before the loss occurs.
Course objectives
By the end of the course, participants will be able to:
- Bound the plan to a single undertaking and its objectives.
- Name an owner with the authority and the budget to act.
- Separate a live issue from a risk that has not yet landed.
- Rank risks by exposure, urgency, and the cost of acting late.
- Fund each agreed response from a reserve that still exists.
- Date every action so an overdue response becomes visible.
- Trigger escalation before a problem stops being affordable.
- Own the first bad news instead of waiting for certainty.
- Hand over the register, the open actions, and the unspent reserve.
Course outline
Unit 1: Foundations of risk management planning
- Contents of a risk plan, from scope to reporting cycle.
- Boundaries of the plan against the enterprise register.
- Objectives as the reference point for every risk listed.
- Risk owner, action owner, and the authority each holds.
Unit 2: Risk identification and assessment techniques
- Assumption analysis and checklists from past incidents.
- Screening out the issue already logged as a risk.
- Likelihood and impact judged against the same evidence.
- Exposure stated in money and days rather than a color.
Unit 3: Developing risk mitigation and response strategies
- Response choices for a threat and for an opportunity.
- Action owners who hold a task and no budget to spend.
- Contingency quietly spent on something else entirely.
- Due date missed while the action owner was on leave.
Unit 4: Implementing and monitoring risk management plans
- Running risk reviews that never become status meetings.
- Escalation nobody made, and the threshold nobody watched.
- Closed risks retired, and new exposures added honestly.
- Reporting the decisions a sponsor is being asked to make.
Unit 5: Building a culture of risk awareness and resilience
- Silence about a slipping date, and what it costs later.
- Near-miss reporting, and the welcome a first warning gets.
- Lessons that change the next plan, not a filed document.
- Redundancy in critical roles, and the register handed over.
How the course is delivered
The course works through documented plans, registers and post-project reviews that participants examine, criticize and rewrite in discussion. Worked examples take a plan from a blank template to a funded, owned and monitored set of responses. Participants are welcome to bring a plan from their own work and use it as the basis for their contributions. The course is educational and does not certify participants or assess any organization's risk practice. Teams managing risk inside delivery projects specifically will find Effective Project Risk Mitigation Strategies a close companion.
Who should attend
- Project and program managers responsible for risk on delivery work.
- Risk officers supporting business units and major initiatives.
- Operations and department managers who own a risk plan for their area.
- PMO staff and sponsors who review risk plans and hold delivery teams to them.
About EuroQuest International Training
EuroQuest International Training was founded in 2015 by a team with more than 25 years of experience in professional development. We deliver over 1,000 courses and have trained more than 15,000 participants. Our head office is in Bratislava, Slovakia, with hubs in Dubai, London, Barcelona, Istanbul, Vienna, Paris and Geneva. Courses are written and reviewed by practitioners from the fields they cover.
Frequently asked questions
Is this course only for project managers?
No. The plan structure applies equally to a department, a site, a change initiative or a major contract. Project examples appear often because that is where risk plans are most visible, but the method is not limited to them.
How much quantitative analysis is involved?
Enough to be useful and no more. Expected monetary value and simple probabilistic analysis are explained, with attention to when a number adds insight and when it adds false confidence.
Does the course include a live lab?
No. There is no software environment. The sessions use documented plans, templates and worked examples that participants analyze and discuss in the room.
Related courses
- Developing Risk Management Frameworks
- Business Risk Assessment and Management Frameworks
- Enterprise Risk Management Strategies
- Crisis Management and Risk Leadership
Register for this course
Pick a city and date from the schedule above to register, or contact EuroQuest about in-house delivery for a team about to start a major project.
All Course Dates & Locations
29 dates · 17 cities · Sep 2026 – Jul 2027