Risk Management

We identify, assess and implement controls which mitigate risks to assist organisations with optimum performance

Management of risk is essential for the success of all activities that businesses undertake. In addition to the risk management software solutions developed by Prism Energy we also supply fully experienced risk management consultants to help businesses fulfil their objectives.
We have experience of project risk management, business risk management and HSE risk management as well as the development of bespoke risk management systems.
Our consultancy service offers the following services:
Risk Identification Sessions
Cost & Schedule Risk Analysis
Bowtie Risk Management
Threat & Opportunity Identification & Management
Decision Tree Development
Bespoke Risk Management Solutions
What is Risk Management?
Risk management is the identification, assessment & control of risks that relate to an activity.

Risks exist in every activity that is undertaken and can be categorised as either threats (negative) or opportunities (positive).

Effective risk management enhances the opportunities & reduces the impact of threats, to maximise the chance of success.
There are various methods and approaches for risk management but all follow the same basic steps as shown below. 

Prism Energy employs a variety of methods and approaches depending on each activity these include but are not limited to risk registers, risk bowties, cost and schedule risk analysis & decision tree analysis.

Risk Bowties

Risk bowties are a visual method of identifying and managing risk. In this method risk is managed in the traditional approach of mitigating threats but an additional step is taken to identify the consequences of a risk being materialised.

A typical risk bowtie is shown in the following diagram:



The centre of the diagram is known as the top event and is the outcome that we do not want to occur.

To the left of the top event is a list of threats that could cause it to occur and a series of barriers that are put in place to prevent the threat materialising.

To the right of the diagram is a list of consequences that could arise from the top event occurring. Barriers are included to try and prevent the consequence happening.

Bowties are ideally suited for a number of activities including projects, asset safety case documents and stand alone activities. The method produces excellent results due to its systematic approach and visualisation.


Risk Registers

A risk register (or risk log e.g. in PRINCE2) is a scatterplot used as risk management tool and to fulfill regulatory compliance acting as a repository for all risks identified and includes additional information about each risk, e.g. nature of the risk, reference and owner, mitigation measures.


Decison Trees


Decision trees are a support tool that generate tree-like graphs of decisions to help determine outcomes for activities.


It is a powerful brainstorming method to help identify a strategy most likely to achieve a goal and gives a record of why decisions were taken.


Cost Schedule/Risk Analysis


Schedule risk analysis (SRA)

Schedule risk analysis is a simple yet effective technique for mapping activity risks to the a baseline schedule.

The process enables the management team for the activity to understand the potential impact of uncertainty to a project duration.

Each line item of the baseline schedule has a duration range applied to it to define a minimum, maximum & most likley duration.

Once this stage is complete a Monte Carlo analysis is undertaken on the whole schedule, which generates a range of outcomes of dates for key points in the schedule.

The most commonly generated are the P10 (10% probability), P50 (50% probability) & P90 (90% probability) for the project end date.


The software also generates a tornado chart that lists the main drivers/threats that affect the duration of the schedule.


Understanding uncertainty and drivers allows management teams to accurately set budgets & targets and also to focus resources on the key threats.

Cost Risk Analysis (CRA)

Cost Risk analysis is a similar technique to the SRA but but maps activity risks to baseline estimates.

The process is identical in that a range, in this case cost, is applied to each item in an estimate.

The outcome from the Monte Carlo generates P10, P50 & P90 costs for the overall estimate and also a tornado chart of the key drivers.

The CRA is a powerful tool for creating budgets that are risk based and therefore more likely to be met.


PageLines