Has a risk management plan 1 = All three criteria are As per NPMS, a risk management plan been completed, and to met, OR a risk should be incorporated into the IAR what degree have management plan is and/or project plan for identification appropriate contingency not required. and mitigation. been included which 2 = Two of the three respond to the risks as criteria are met. identified in the plan? 4 = One of the criteria Consider the following is met. criteria: 5 = None of the three criteria are met. identified risks have been Note: An organizational assessed and prioritized. risk management should be involved. appropriate controls and mitigations are in place for all significant residual risks. a risk management plan has been integrated into the project management plan. Is an appropriate information 1 = Highly effective IM management (IM) process practices are in place If abiding by the NPMS, an Information planned or in place to or planned to support Management Plan must be completed collect, distribute, and the project throughout using the Information ‘PWGSC protect relevant and its life cycle. Management Plan’ template important project 3 = Standard IM practices information provided on ‘PWGSC information, such as are planned or in Information Management Portal’. designs, project plans, place and resourced. baseline, and registers? 5 = Minimal IM practices are in place or planned within project. PROJECT REQUIREMENTS RISK (15 Questions) 7. How many of the following 1 = None of the a) What is the amount of time the statements are true? statements are true. application must be available for use? ie. If the IT application is mission the project solution requires 2 = One of the statements critical, it will have a high degree of a high degree of availability. is true. availability with minimal downtime.
Has a risk management plan been completed, and to what degree have appropriate contingency been included which respond to the risks as identified in the plan? Consider the following criteria: identified risks have been assessed and prioritized. appropriate controls and mitigations are in place for all significant residual risks. a risk management plan has been integrated into the project management plan. 1 = All three criteria are met, OR a risk management plan is not required. 2 = Two of the three criteria are met. 4 = One of the criteria is met. 5 = None of the three criteria are met. Note: An organizational risk management should be involved. As per NPMS, a risk management plan should be incorporated into the IAR and/or project plan for identification and mitigation. Is an appropriate information management (IM) process planned or in place to collect, distribute, and protect relevant and important project information, such as designs, project plans, baseline, and registers? 1 = Highly effective IM practices are in place or planned to support the project throughout its life cycle. 3 = Standard IM practices are planned or in place and resourced. 5 = Minimal IM practices are in place or planned within project. If abiding by the NPMS, an Information Management Plan must be completed using the ‘PWGSC Information Management Plan’ template information provided on ‘PWGSC Information Management Portal’. 7. PROJECT REQUIREMENTS RISK (15 Questions) How many of the following statements are true? the project solution requires a high degree of availability. 1 = None of the statements are true. 2 = One of the statements is true. a) What is the amount of time the application must be available for use? ie. If the IT application is mission critical, it will have a high degree of availability with minimal downtime.