NASA Logo - John F. Kennedy Space Center

+ Visit NASA.gov
+ Contact NASA
GO
KSC HOME SITE SEARCH MULTIMEDIA FAQ/CONTACT US NASA CENTERS
 
System Management Office (SMO)

SMO HOME
FUNCTIONAL AREAS
PROGRAM/PROJECT MANAGEMENT
SYSTEM ENGINEERING
HUMAN FACTORS
RISK MANAGEMENT
RELIABILITY
SOFTWARE ENGINEERING
COST ESTIMATING
SERVICES
POLICY
PROCESSES
STANDARDS
TOOLS
TECHNIQUES
TRAINING
CONSULTATION
INDEPENDENT ASSESSMENTS
RISK MANAGEMENT
 
Policy

The major Agency Risk Management (RM) documentation sources are:
NPD 7120.4C, Program/Project Management which describes the management systems for program/project formulation, implementation, and evaluation.

NPR 7120.5D NASA Space Flight Program and Project Management Requirements, which dictates basic risk management requirements.

NPR 7120.6 The NASA Lessons Learned Process

NPR 7120.7 NASA Information Technology, Institutional Infrastructure Program & Project Management Requirements

NPR 8000.4 Risk Management Procedures and Guidelines, which provides additional information for applying risk management to programs and projects as required by NPR 7120.5B.

Procurement Notice (PN) 97-58, Risk Management which describes requirements for risk management in the acquisition lifecycle
Code Q S&MA Documentation Tree (General Link)

The aforementioned Agency documentation requirements for risk management can be summarized in the following eight (8) requirements:
  1. Program and project decisions shall be made on the basis of an orderly risk management effort

  2. Risk management includes identification, assessment, mitigation, and disposition of risk throughout the project formulation, approval, implementation, and disposal phases

  3. Project/Program Manager (PM) has the overall responsibility for the implementation of risk management, ensuring an integrated, coherent risk management approach throughout the project

  4. Risk management planning will be developed during the program/project formulation phase, included in project/program plans, and executed during the implementation phase
  5. Programs and projects will develop and maintain prioritized risk lists

  6. Programs and projects must develop and clearly communicate "success criteria" to all levels of the program and project to define the scope of the effort and to guide risk decisions

  7. Programs and projects must define, within the constraints imposed upon them (e.g., budget, schedule), what level of risk (i.e., "acceptable risk") is reasonable for the program/project to accept while still achieving mission success

  8. Primary risks (i.e., risks having high probability and high impact/severity) must be classified, with acceptance rationale documented and concurred with by the Governing Program Management Council (GPMC)

Process

KDP-P-2391, Risk-Based Acquisition (R-BAM) Risk Assessment Process (UNDER DEVELOPMENT)

KDP-P-2392, Continuous Risk Management (CRM) Implementation Process (UNDER DEVELOPMENT)

Standards

None

Tools

There are a variety of Agency tools for employing risk management as part of a project team or an acquisition effort (e.g., CRM and R-BAM). The following links provide general information about these tools, including some links to risk management planning tools (e.g., Risk Management Plan template), risk identification tools (e.g., Risk Information Sheet), and project risk documentation tools (e.g., risk management databases).  For specific information (or training) regarding how these tools can (and are being) utilized by various KSC organizations, please contact John Branard, KSC Risk Analysis Manager, QA-C, 867-2268.

General Risk Management Tool Information
GSFC CRM Page (CRM information provided by the lead Agency Center for CRM training and tools)

GRC R-BAM Page (R-BAM information provided by the lead Agency Center for R-BAM training and tools)

Office of S&MA/Code Q Home Page (Click the "Risk" button on the left-hand side of the website)

Process-Based Mission Assurance (Contains detailed NPR 7120.5B requirements links and risk management best practices for RM plans)

Risk Management Planning Information
KSC Risk Mgmt. Plan Template (Developed by Spaceport Engineering And Technology Directorate. The objectives of this template are:: (1) satisfy the requirements of NPR 7120.5B, NASA Program and Project Management Processes and Requirements, as tailored for this project, and (2) describe the expectations for the selected Risk Management (RM) practices in terms of project usage; e.g., to better understand the mission success sensitivity to project features, to scope the adequacy of the budget reserve, etc.) Contact John Branard 321-867-2268 to access the latest version

KSC ATDC Risk Management Plan (Example Completed RM Plan)

Automated Requirement Measurement (ARM) Tool (A tool to assess the quality, strength, and completeness of project requirements specifications documentation)

Risk Identification Tool:
Risk Information Sheet (Tool for capturing individual project risks) Contact John Branard 321-867-2268 to access the latest version

Risk Management Databases
Risk Radar (FREE, downloadable RM Database for project risk data)

GRC RM Database Tool (FREE, downloadable RM Database for project risk data)

Reliability & Maintainability Links

Polaris - Risk Management support

Techniques

Risk Management Techniques
(Various techniques that can be used by project/program teams or individuals to identify, analyze, plan, track, control, and communicate/document risks. This list is taken from CRM Guidebook [available in the KSC Library]; further details will be provided on this website at a later date)

Training

Several risk management training modules are available for KSC project/program and acquisition teams.  In addition, general risk management training can be found on the NASA Site for On-Line Learning and Resources (SOLAR) website.

KSC Continuous Risk Management (CRM) Training
CRM training is available for KSC project or program teams. For information on CRM training, please contact John Branard, KSC Risk Analysis Manager, QA-C, 867-2268. The first two KSC CRM training modules (Module 1 - Welcome and Module 2 - Introduction) are provided below.

"KSC CRM Module 1 (Welcome) - This module provides an overview of the CRM course modules and schedule

KSC CRM Module 2 (Introduction) - This module provides an overview of Agency risk management requirements, risk definitions, risk/project management relationship, CRM process steps, and RM planning information

KSC Risk-Based Acquisition Management (R-BAM) Training
R-BAM training is available for KSC Procurement Development Teams (PDTs) for major KSC acquisitions (>5 M$, requiring formal acquisition planning, Acquisition Strategy Meeting at NASA Headquarters). For information on R-BAM training, please contact John Branard, KSC Risk Analysis Manager, QA-C, 867-2268. A copy of the R-BAM Overview Training provided to KSC PDTs is provided below.

KSC R-BAM Overview Training - This presentation provides an overview of Procurement Notice (PN) 97-58, Risk Management, as well as how R-BAM is utilized to support KSC PDTs

Below are links for risk management training on the NASA Site for On-Line Learning and Resources (SOLAR) website.

NASA SOLAR Website - (The SOLAR website contains three Risk Management training modules [i.e., Risk Management Overview, Risk Management Plan Development, Risk Management: Risk as a Resource] under the "Training Disciplines/Complete List of Courses/S&MA" button)

INFORMATION/RESOURCES
+ Organization
+ Office of the Chief Engineer
+ Councils, Groups & Boards
+ Programs/Projects
+ NIAT
+ Lessons Learned
+ Operations Plan
+ Metrics
Other Links
+ Contact Us
+ Other Center's SMOs


USA.gov is the U.S. government's official web portal to all federal, state and local government web resources and services. A product of:
Information Technology & Communication Services Directorate
Michael J. Bolger, Director
Web Development: IMCS Web Development Team

+  NASA Privacy Statement, Disclaimer, and Accessibility Certification

NASA Home Page
Curator/Technical Support:
Tracey Kickbusch
NASA Official: Warren Wiley
Last Updated: February 19, 2009