專案風險管理資訊系統應用案例探討

Abstract

公司管理分策略管理、經營管理及風險管理3大領域(宋明哲，民93.10)，直指公司管理精髓所在，亦充份說明風險管理之重要性及提供CEO逐年達成公司短、中、長期目標之聚焦重點。 風險管理強調管理程序循環，即一．風險辨識、二．風險評估、三．風險處置、四．風險監控，其中風險評估採定性分析及定量分析並行，以掌握風險發生之Probability及Severity/Impact，即風險矩陣(Risk Matrix)，並藉矩陣中2軸乘積之風險評分(Risk Score)以下決策採風險轉移(Risk Transfer)、風險廻避(Risk Avoidance)、風險減輕(Risk Mitigation)或風險承擔(Risk Retention)其中一種風險處置策略，並監控執行過程且不斷回饋修正以確保風險依規劃納入掌控。 經以實際案例導入資訊系統應用後成功驗證上述理論與流程，且採風險減輕策略並訂定減輕步驟，追蹤監控後確實令風險由最嚴重的紅燈逐步降低至可接受範圍的綠燈，值此國內企業對風險管理需求殷切之際，本研究成果提供風險管理之實務方法，以掌控專案執行過程中之不確定因素並於預期之進度、成本、品質下達成專案目標。

Enterprise management comprise 3 segments as strategy management, operation management and risk management(Ming-Che Sung, 2004), point out the highest guide for enterprise management and lead CEO focus on do the right things then do the things right and control the uncertainty to fulfill the goals of the company. Risk management emphasizes the management process, which are risk identification, risk assessment, risk response and risk monitoring and control, while assessment using qualitative analysis and quantitative analysis to figure out the probability and severity/impact of the risk, known as risk matrix, according to the risk score in the risk matrix of each risk impact type to adopt one of the response strategy as risk transfer, risk avoidance, risk mitigation or risk retention, then make decision for responding, then monitoring and control the execute process and feed back to modify the process steps to make sure the risk events are under controlled as the risk plan. After implementing a real case using risk managing software, in this case we take the mitigation strategy and adopt a serious of mitigation steps for responging then monitoring the status of each steps and find out the traffic light from original red light(means high priority) falling to green light after finishing all the mitigation steps, the perfect condition can be accepted by risk manager, the case study fully proved the theory and come out the success result, the case study provides the methodology of the implementation of project risk management application tool, for the enterprise to control the risks of a project to meet the schedule, cost, and quality commitment and fulfill the project goals.