In MSP (Managing Successful Programmes) 5th edition, Risk Responses and Opportunity Management sit within the broader programme approach to uncertainty, closely linked to the Assurance and Decisions themes. Risks are uncertain events that could positively or negatively affect programme objectives. …In MSP (Managing Successful Programmes) 5th edition, Risk Responses and Opportunity Management sit within the broader programme approach to uncertainty, closely linked to the Assurance and Decisions themes. Risks are uncertain events that could positively or negatively affect programme objectives. Threats are negative risks, while opportunities are positive risks that, if realised, can enhance benefits or reduce costs.
Risk Responses for threats include: Avoid (eliminate the threat or its impact), Reduce (lessen probability or impact), Transfer (shift impact to a third party, such as insurance), Accept (take no action but monitor), Share (distribute risk between parties), and Prepare Contingent Plans (ready actions if the risk occurs). Fallback plans provide a safety net if primary responses fail.
Opportunity Management focuses on positive uncertainty. Responses include: Exploit (make the opportunity certain to happen), Enhance (increase probability or benefit), Share (jointly pursue with partners), Reject (decide not to pursue), and Accept (capitalise if it arises without proactive investment). MSP encourages actively seeking opportunities throughout the programme lifecycle, as programmes are transformational and generate emergent benefits.
The Decisions theme is critical here: governance boards use risk and opportunity information to make informed choices at decision points, balancing risk appetite, tolerance, and value delivery. The Sponsoring Group and Programme Board weigh whether responses justify their cost and align with strategic objectives.
The Assurance theme ensures risk and opportunity management is credible, effective, and independently reviewed. Assurance activities validate that responses are appropriate, controls are working, and reporting is accurate, giving stakeholders confidence.
Effective integration means capturing risks and opportunities in a Risk Register, assessing probability and impact, assigning owners and actioners, and continuously monitoring. By treating uncertainty proactively, programmes protect value from threats while maximising value from opportunities, supporting sound decision-making and robust assurance across the entire programme.
Risk Responses and Opportunity Management
Risk Responses and Opportunity Management
Within the MSP (Managing Successful Programmes) framework, understanding how to respond to risks and manage opportunities is a critical part of the Assurance and Decisions themes. Programmes operate in environments of high uncertainty, and how a programme responds to threats and exploits opportunities can determine whether it delivers its intended benefits.
Why It Is Important
Programmes are, by their nature, larger, longer, and more complex than projects. This means they carry more uncertainty over an extended period. Effective risk responses and opportunity management are important because:
1. They protect the programme's ability to deliver benefits. Unmanaged threats can derail the entire transformation. 2. They enable proactive decision-making. Rather than reacting to events, the programme team plans ahead. 3. They support the realisation of value. Opportunities, when captured, can enhance benefits beyond the original expectation. 4. They provide assurance to stakeholders and sponsors. Demonstrating control over uncertainty builds confidence in the programme.
What It Is
A risk is an uncertain event that, if it occurs, will have an effect on the achievement of objectives. In MSP, risks can be negative (threats) or positive (opportunities).
Risk responses are the actions taken to deal with threats, while opportunity management deals with positive uncertainties that could benefit the programme.
The threat responses in MSP are typically: Avoid - change the plan to eliminate the threat. Reduce (Mitigate) - take action to lower the probability or impact. Transfer - pass the risk to a third party (e.g. insurance, contracts). Accept - take no action but monitor the risk. Share - share the risk between parties (common in collaborative programmes). Prepare contingent plans - have a fallback plan ready to activate.
The opportunity responses in MSP are: Exploit - take action to ensure the opportunity happens. Enhance - increase the probability or impact of the opportunity. Share - share the benefit with another party. Reject (Accept) - take no proactive action but remain open to the benefit.
How It Works
Risk responses and opportunity management follow a structured process, often aligned with the risk management cycle:
1. Identify - capture threats and opportunities in the risk register. 2. Assess - evaluate probability, impact, and proximity. 3. Plan responses - select appropriate responses using the categories above. 4. Implement - assign risk owners and risk actionees to carry out responses. 5. Communicate - keep stakeholders informed through the programme's governance.
Two key roles are involved: the risk owner (accountable for managing a specific risk) and the risk actionee (responsible for carrying out the response actions). At programme level, responses must be considered in the context of aggregated risk and the programme's overall risk appetite and tolerance.
Opportunity management is integrated into the same process, ensuring the programme does not only defend against threats but actively seeks to add value.
How to Answer Questions in an Exam
Exam questions in this area often test whether you can match a scenario to the correct response type. You may be given a situation and asked to identify whether the action described is an example of avoid, reduce, transfer, accept, exploit, or enhance.
Read the scenario carefully and determine first whether it concerns a threat or an opportunity. Then match the described action to the correct response category. Be careful with similar-sounding responses such as reduce (which lowers probability or impact of a threat) versus enhance (which increases probability or impact of an opportunity).
Exam Tips: Answering Questions on Risk Responses and Opportunity Management
Tip 1: Memorise the threat responses and opportunity responses as two distinct lists. Confusing the two is a common mistake.
Tip 2: Note the mirror relationship - Avoid mirrors Exploit, Reduce mirrors Enhance, and Accept mirrors Reject. Understanding this symmetry helps you recall responses quickly.
Tip 3: Watch for keywords. Words like 'eliminate' or 'remove entirely' point to Avoid; 'lessen the impact' points to Reduce; 'pass to a supplier' points to Transfer; 'make sure it happens' points to Exploit.
Tip 4: Remember that 'accept' does not mean 'ignore' - it means monitoring the risk while taking no proactive action.
Tip 5: Distinguish between the risk owner (accountable) and risk actionee (performs the action) if asked about roles.
Tip 6: In scenario questions, always identify whether the item is a threat or opportunity before choosing a response.
Tip 7: Relate answers back to the programme's benefits and vision, as MSP emphasises delivering value, not just controlling risk.
By understanding the distinct categories, their mirrored relationships, and how they support the programme's benefits, you will be well prepared to answer questions confidently on Risk Responses and Opportunity Management.
