Is this an Issue or a Risk?

Someone recently posted on asking for help distinguishing whether the situation they are facing should be logged as an issue or a risk.

The situation is that they have an engineer assigned to start work soon on the project, and that he is currently overloaded with work from their functional manager.  The concern is that this may put the project schedule at risk.

Suppose this were your project, and members of your team or other stakeholders disagree about whether to report this as a risk or as an issue.  What would you do? Do you have a risk, or do you have an issue?

Actually, you have BOTH an issue and a risk.  The issue you have is closely related to the risk, but they are not quite the same.

To clarify this, you have to look at the PMBOK® Guide’s definitions of issue and risk:

Issue – a current condition or situation that may have an impact on the project objectives.

Risk – an uncertain event or condition that, if it occurs, has a positive or negative effect on one or more project objectives.

On the one hand, issues and risks are similar in that they may affect project objectives.  On the other hand, they are different in that issues are CURRENT conditions or situations, while risks are UNCERTAIN events or conditions.  An issue is something that has happened, or is happening. A risk is something that might happen.

You have an overloaded engineer.  That’s an issue. It’s current, and it may affect project objectives.  It needs to be added to the issue log, and assigned to someone to deal with it.

Your overloaded engineer might not deliver on time.  That’s a risk. It may or may not happen, but if it does, it has an effect on project objectives.  (Assuming that late delivery of this engineer’s work will indeed affect project outcomes, which it might not if it’s not on the critical path.)  It should be added to the risk register, prioritized using qualitative risk analysis, risk responses planned, and assigned to someone.

This issue and risk are closely related, and have the same root cause, and should probably both be assigned to the same person.  You will at least need to coordinate them, and you may want to manage them together using just risk management (which provides more tools & techniques for managing them), and use the issue log simply to keep a record of the occurrence.

Also, note that the PMBOK® Guide (p. 96) describes the issue log saying

“Throughout the life cycle of a project, the project manager will normally face problems, gaps, inconsistencies, or conflicts that occur unexpectedly and that require some action so they do not impact the project performance.”

Notice that these are things that occur UNEXPECTEDLY, meaning that they were not identified risks.  At a minimum, this means that the issue log includes items that were not identified as risks, and so did not go through risk analysis & response planning.  The question is whether expected issues (i.e., risks that have occurred) also belong in the issue log.

Some may argue that risks that occur don’t belong in the issue log because they were expected, and are being managed in the risk register.  Personally, I like to have them in the issue log in order to have a single place that lists all current situations, whether expected or unexpected.  The risk responses & risk status are still managed in the risk register, but the issue log provides a single point of visibility for all of the current “issues” on the project.

1 Response

  1. […] P.S. You might ask yourself whether this assumption is a risk or an issue. I answer the question of how to distinguish issues from risks in my article Is this an Issue or a Risk? […]