8th International Quality Conference May 23rd 2014 Center for Quality, Faculty of Engineering, University of Kragujevac

1) MANAGING OF RISKS AND QUALITY IN Bojan Stojcetovic Milan Misic1) PROJECTS Zivce Sarkocevic1) 1) Abstract: On each project affects a large number of risk Dragan Lazarevic events, its managing is difficult and requires many Danijela Zubac1) interventions. Risk events also greatly affect the quality of the project. Delivering the project with demanded 1) High technical school of quality customer should be primary objective of project professional studies, Zvecan, manager. But to achieve that it’s necessary to manage Serbia quality in all project activities. Managing of risk and [email protected] quality in projects is described in paper that follows. Keywords: projects, , risks management

1. INTRODUCTION 2. RISK

Risk and quality management has Risk is an uncertain event or condition been designated as two of the main areas that, if it occurs, has an effect on at least of the Body of one project objective. Objectives can Knowledge (PMBOK) by the Project include scope, schedule, cost and quality Management Institute, which is the largest [1]. Outcomes of risky events can be both, professional organization dedicated to the positive and negative. project management field. It is impossible to imagine a project The presence of risk creates surprises without risk. Of course some projects will throughout the project life cycle, affecting be high-risk, while others have less risk, everything from technical feasibility to but all projects are by definition risky to cost, market timing, financial performance, some extent. strategic objectives and of course quality. Those involved with launching, Since all projects are exposed to risk, sponsoring and managing projects in successful projects are the ones where that organizations should welcome risk in their risk is properly managed. Systematic projects, since it enables and supports application of change, innovation and creativity – as long methodology and its extension to the entire as it is taken sensibly, intelligently and organization can provide a significant appropriately, and as long as it is managed competitive advantage in an increasingly effectively. It is also important to uncertain world. remember that not all risk is bad, since the Every project has an anticipated level concept includes both threats and of quality for the project deliverables. The opportunities. Within the project context, details and specifications set out by the this means that there are uncertainties that customer determine what the expected matter because if they occurred they would level of quality is. But risk event can hinder achievement of project objectives threaten planned quality. For that reason (threats), but there are also uncertainties it’s necessary to manage both quality and whose occurrence would help to achieve risks in projects. those objectives (opportunities). The risk of the project is characterized

8th IQC May, 23 2014 51 by three key factors, namely: [2] project team members and  risk event - phenomenon, activity management, clients and or event that could have a customers, suppliers and negative impact on the project; subcontractors.All of these  probability of risk - the individuals and groups are likelihood of the risk event; unpredictable to some extent, and  the size of the stake - the size of introduce uncertainty into the the loss, which can occur when projects on which they work. the event is achieved.  Stakeholders - These are a particular group of people who 2.1. What projects makes risky? impose requirements, There are numerous risks which can expectations and objectives on the affect on project. Some of them can be project. Stakeholder requirements presented in one of following groups: can be varying, overlapping and  common characteristics of sometimes conflicting, leading to projects; risks in project execution and  external environment. acceptance. Factors in all projects which make  Change - Every project is a them inherently risky include: change agent, moving from the  Uniqueness - Every project known present into an unknown involves at least some elements future, with all the uncertainty that have not been done before, associated with such movement. and naturally there is uncertainty Some of environmental factors are: associated with these elements;  market volatility;  Complexity - Projects are  competitor actions; complex in a variety of ways, and  emergent requirements; are more than a simple list of  client organizational changes; activities to be performed. There  internal organizational changes; are various kinds of complexity in  political; projects, including technical,  economic; commercial, interfaces or  social; relational, international project  technological; each of which brings risk into the  legal; project.  international;  Assumptions and constraints-  environmental; Project scoping involves making  demographic factors. a range of guesses about the

future, which usually include both 2.2. How to manage risks in projects? assumptions (things we think will Although some risks can have positive or will not happen) and impact on projects it is necessary to constraints (things we are told to manage risks because mostly of them are do or not do). Assumptions and harmful and can have negative influence constraints may turn out to be on project. wrong, and it is also likely that The objectives of project risk some will remain hidden or management are to increase the probability undisclosed, so they are a source and impact of positive events and decrease of uncertainty in most projects. probability and impact of negative events  People - All projects are in the project [1]. performed by people, including

52 B. Stojcetovic, M. Misic, D. Lazarevic, D. Zubac

There are numerous approaches for and to reduce threats to project risk management and in this paper will be objectives; presented PMBOK methodology.  Perform qualitative risk Project risk management include analysis – there are numerous following processes: risks but not all of them have  Plan risk management – this same impact so it’s necessary to process is very important. In this prioritize risks. This process process project manager should allow it by assessing and provide necessary resources and combining risk probability of time for risk management occurrence and impact; activities. Result of this process is  Perform quantitative risk risk management plan which analysis – is the process of the describes how risk management numerically analyzing the effect will be structured and performed of identified risks on overall on the project; project objectives.  Identify risks – this process  Monitor and control risks – should determine which risks may include implementing risk affect the project and document response plans, tracking identified their characteristics. This is risks, monitoring residual risks, permanent process because risks identifying new risks, and can appear through its life cycle; evaluating risk process  Plan risk responses – each risk effectiveness throughout the event may demand different project. Project should be responses. In this process we continuously monitored for new should develop options and risks. actions to enhance opportunities

Figure 1 - Risk management processes

8th IQC May, 23 2014 53

2.3. What are the possible strategies for ensures that each risk requiring a response risk response? has an owner monitoring the responses, Risk response is the process of although the owner may delegate developing strategic options, and implementation of a response to someone determining actions, to enhance else. opportunities and reduce threats to the Risk response strategies are presented project’s objectives. A project team in table 1. and it is divided into two member is assigned to take responsibility groups. for each risk response. This process

Table 1 – Risk response strategies Strategies for threats Strategies for opportunities AVOID - Risk can be avoided by removing EXPLOIT - The aim is to ensure that the the cause of the risk or executing the project opportunity is realized. This strategy seeks to in a different way while still aiming to eliminate the uncertainty associated with a achieve project objectives. Not all risks can particular upside risk by making the be avoided or eliminated, and for others, this opportunity definitely happen. Exploit is an approach may be too expensive or aggressive response strategy, best reserved for time‐consuming. However, this should be the those “golden opportunities” having high first strategy considered. probability and impacts. TRANSFER - Transferring risk involves SHARE - Allocate risk ownership of an finding another party who is willing to take opportunity to another party who is best able responsibility for its management, and who to maximize its probability of occurrence and will bear the liability of the risk should it increase the potential benefits if it does occur. The aim is to ensure that the risk is occur. Transferring threats and sharing owned and managed by the party best able to opportunities are similar in that a third party deal with it effectively. is used. MITIGATE - Risk mitigation reduces the ENHANCE - This response aims to modify probability and/or impact of an adverse risk the “size” of the positive risk. The event to an acceptable threshold. Taking opportunity is enhanced by increasing its early action to reduce the probability and/or probability and/or impact, thereby impact of a risk is often more effective than maximizing benefits realized for the project. trying to repair the damage after the risk has If the probability can be increased to 100 occurred. percent, this is effectively an exploit ACCEPTANCE - This strategy is adopted whenresponse. it is not possible or practical to respond to the risk by the other strategies, or a response is not warranted by the importance of the risk. When the project manager and the project team decide to accept a risk, they are agreeing to address the risk if and when it occurs. A contingency plan, workaround plan and/or contingency reserve may be developed for that eventuality.

3. QUALITY or system. The requirements may be those of customers or stakeholders, an important The Project Management Institute group that is ignored at great peril to the defines quality [3, 4, 5, 6] as “the degree to success of the project. which a set of inherent characteristics The essence of the quality concept [7] fulfill requirements.” The set of inherent is that product (goods or services) characteristics may be a product, processes generated by the project of any

54 B. Stojcetovic, M. Misic, D. Lazarevic, D. Zubac organization should fulfill the stated and action to eliminate them. In that implied needs of the recipient. way and possible impact of risk Project quality is the factor that can events can be decreased. significantly affect the possibility of risks appearing and the extent of these risks consequences. Project quality management is compatible with ISO 9000 and ISO 10000 [8] quality standards and guidelines. Perform Plan quality quality assurance 3.1. How to manage quality in projects? Project quality management includes processes and activities of the performing organization that determine quality policies, objectives and responsibilities so that the project will satisfy for needs for Perform which it was undertaken. It implements the quality quality management system through policy control and procedures with continuous process improvement activities conducted Figure 2 - Project quality management throughout as appropriate. Product quality measures and techniques are specific to the 3.2. ISO 10006:2003 type of product produced by the project. ISO 10006: 2003 provides guidance Project quality management include next on quality management in projects. It processes: outlines quality management principles and practices, the implementation of which  Plan quality – first step in quality are important to, and have an impact on, management is to identify quality the achievement of quality objectives in requirements and standards for projects. the project and product. Planning This standard can apply to projects should be parallel with other which can take many forms from the small processes, because quality changes of product can affect on to very large, from simple to complex, from being an individual project to being cost and schedule. For that reason part of a programme or portfolio of it’s necessary to perform risk projects. analysis; ISO 10006:2003 is not a guide to  Perform quality assurance – "project management" itself. Guidance on include auditing the quality quality in project management processes is requirements and the results from discussed in this International Standard. quality control measurements to Guidance on quality in a project's product- ensure appropriate quality related processes, and on the "process standards and operational approach", is covered in ISO 9004. A new definitions are used; "Project Management - Guide to project  Perform quality control– Management" ISO 21500 has been monitoring and recording results published in September 2012. Since ISO of executing the quality activities 10006: 2003 is a guidance document, it is to assess performance and not intended to be used for recommend necessary changes. certification/registration purposes. Control activities should identify

causes of poor process or product

quality and recommend and take

8th IQC May, 23 2014 55

4. A NEW FUZZY ABC MODEL consistency of project activities [9, 10]; It can be said that the integration of The use of specific and measurable risk management methodology and quality indicators regarding quality and risk, to contributes to increasing the effectiveness allow the substantiation of business of quality management, by emphasizing on decisions of improvement and the preventive nature of the decisions organizational performance. regarding strategies and measures for improvement. Knowing the current state of the risk 5. CONCLUSION approach in quality management is important in establishing ways to extend Every project is under constant risk the integration of risk into quality at all threats and uncertainty, also its question levels. In this regard, it should be noted until project closing will project quality that the risk lies in the quality management satisfy customer expectations. From this systems (QMS), whose philosophy is can be concluded that is necessary to based on the principle of risk prevention. manage risk and quality in projects. If not, Thus, effective implementation and planed time, budget and quality can be operation of the ISO 9001 QMS model unreachable. provides the opportunity for organizations Quality should be main project to consistently make product and process objective. Delivering project on time, to defined parameters, implicitly, the within budget and without demanded existence of mechanisms and tools to quality does not mean a lot to the prevent and reduce risk. customer. Thus, quality is what customer The integrated approach of quality and risk wants and not what project manager management is facilitated by the fact that makes. ISO 9001 and ISO 31000 standards have There are different risk response elements and common principles, most strategies and cause every project is unique important being the following: its necessary to apply appropriate strategy  Quality and risk are associated to depend on situation. management, which involves Main common characteristic of risk conducting systematic planning and quality management is that both and controlling processes; concepts attempt to reduce the negative  Quality management system and impacts of the project activities and risk management system ensure outcomes.

REFERENCES:

[1] Project Management Institute, A guide to the project management body of knowledge, Fourth edition, 2008. [2] Jovanović, P., Upravljanje projektima. Beograd, Fakultet organizacionih nauka, 2008. [3] Bourne, L., Walker, D.H.T., Advancing project management in learning organizations. Emerald Group Publishing Limited, 2004. [4] Kenneth, R., Project quality management – Why, what, and how, J.Ross publishing, 2005. [5] Charvat, J., Project management methodologies, John Wiley and sons, 2003. [6] Harrison, F., Lock, D., Advanced project management – a structured approach, Gower publishing limited, 2004.

56 B. Stojcetovic, M. Misic, D. Lazarevic, D. Zubac

[7] Basu, R., Implementing Quality: A Practical Guide to Tools and Techniques: Enabling the Power of Operational Excellence. Thomson (2004). [8] ISO, ISO 10006:2003 Quality Management Systems – Guidelines for Quality Management in Projects, 2003. [9] Zafarani, E., "Project Quality Management Approaches: A Comparative Evaluation of International Standards" 2nd International Conference on Construction and Project Management 15 (2011) 37-43. [10] Popescu, M., Dascălu a., "Considerations on integrating risk and quality management", Economics and Applied Informatics 1 (2011) 49-54.

8th IQC May, 23 2014 57

58 B. Stojcetovic, M. Misic, D. Lazarevic, D. Zubac