<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=1063935717132479&amp;ev=PageView&amp;noscript=1 https://www.facebook.com/tr?id=1063935717132479&amp;ev=PageView&amp;noscript=1 "> Risk Reports

Risk Reports

Learn how to create a risk report for a large program.

Overview

There are two main types of risk:

  • Initiative / Critical Path Risks - Potential issue or uncertainties that threatens the sequence of tasks essential for timely project completion. Because activities on the critical path have zero float (i.e., they cannot be delayed without impacting the project end date), any disruptions in those activities directly extend the overall timeline. Identifying and mitigating critical path risks is thus crucial: if one task on the critical path slips, it creates a domino effect that delays the entire project.

  • Team Risks - Team’s available time, skill sets, or resources are insufficient to execute the tasks and meet project demands on schedule. This risk often surfaces when there is too much work assigned relative to the team’s bandwidth, or when the team lacks certain key competencies needed for critical tasks. If a team is operating at or beyond capacity, any additional workload or unexpected challenges can jeopardize timelines, quality, or both. Effective resource planning, clear role definitions, and timely training or hiring can help mitigate team capacity risks.

This document details how you can create a risk report.

Risks should be identified and reported with the team. However, it’s a good idea to have a bit of independent analysis performed by the program manager.

Critical Path Risks

Bitovi’s AutoScheduler can document the critical paths in a collection of epics.

To see the following, you need access to Bitovi’s training instance.

image-20250330-225401.png

The report shows the critical paths in order:

  • First Epic - The first epic on the critical path

  • Days in Critical Path - How many total working days across all teams will be spent on the critical path

  • Following Epics in Critical Path - The epics after the first epic that are on the critical path

  • Days for All blocked work - The total amount of days blocked by the first epic, including epics that are not on the critical path

  • Remaining Blocked Epics - Epics blocked by the first epic that are not on the critical path

Clicking the Show critical path and blocked work issue will show all epics blocked the the first epic on the critical path:

image-20250330-230014.png

Loading the right epics

You can load all ready initiatives and their epics that are not done with:

image-20250330-231540.png
  • Primary JQL: status = ready and type = Initiative

  • Children JQL: statusCategory != Done

Reporting Critical Path Risks

When reporting critical paths on a large program, it’s important to recognize you can’t address every risk. You want to focus on only the largest because those are where you might have the most impact ( https://en.wikipedia.org/wiki/Amdahl%27s_law ) So identify a number of critical paths you will take a look at and how frequently you will look at risk.

Documenting the critical path risks is often as simple as performing the following for your top critical paths:

  1. Identify the initiative, epic and teams involved with the critical path.

  2. Identify the epics that might have the most room for improvement: Large, low-confidence epics that are blocking downstream epics.

  3. Followup Actions

It might look like:

Days in Critical Path / All blocked work

Initiatives and Teams

Risky Epics

Followup

100 / 140

ITSY-12 Create a promotion
Order, Marketing, Store

STORE-33 validate promotion is available

  • Follow up with team about how to reduce risk

40 / 81

POS-32 Connect To Payment

BUY-33 get test devices

  • Buy devices now and ask for $$ later

Team Risks

There are two places to identify team risks:

  • The autoscheduler’s team working days total.

  • Jira’s capacity report

AutoSchduler Team Working Days

The AutoScheduler reports how many total team working days it sees for each team.

image-20250330-232517.png

This value can be used to identify which team has the most amount of work for a given collection of epics.

Jira Capacity Report

The Jira Capacity view of Plans can show when a team has too many epics for a sprint.

It’s important to keep epics prioritized. Otherwise, it’s hard to know which epic should be moved out of the sprint.

Reporting on Team Risks

For each risky team:

  1. List the total days of work they have

  2. List the largest epics and initiatives they are part of, and the confidence of the epics

  3. List any sprints that are significantly over capacitated

  4. List follow-up actions items to reduce risk

Team

Risky Initiative / Epics

Risky Sprints

Follow up

Order

120 days

ITSY-12 Create a promotion

ITSY-55 Improved Branding

Sprint 22 in Late May

  • Follow up with team
  • Move an epic out of sprint 22
  • Get emails from marketing

BUY

100 days

POS-32 Connect To Payment

  • Buy devices now and ask for $$ later