What risk means

In projects, a risk is an uncertain event that, if it happens, affects an objective such as cost, time, quality or safety. Some risks are threats; some are opportunities.

Risk management follows a cycle. Identify risks, from workshops, checklists and past projects. Analyse each by its likelihood and its impact, first qualitatively with a probability-impact matrix, and for the biggest ones quantitatively. Plan a response: avoid the risk by changing the plan, reduce it, transfer it through insurance or contract, or accept it with a contingency. Then monitor, because risks change as the work proceeds.

All of this is recorded in a risk register with an owner for each risk. Ground conditions, weather, design changes, utility diversions, approvals and supply delays are typical construction risks.

Safety risk on site uses the same logic but different priorities: eliminate the hazard first, then substitute, engineer controls, administrative controls, and only last rely on personal protective equipment. ISO 31000 and ISO 45001 give general frameworks.

A risk is different from an issue: an issue has already happened and needs action now. Turning risks into issues early, by monitoring triggers, is a key project control habit.