Construction project risk assessment
A practical workflow for identifying, scoring, and mitigating risk across the project life cycle.
Why a Formal Risk Process
Every project has risks. Mature project organizations don't avoid risk, they identify, price, and assign it explicitly. A formal risk assessment process produces a risk register that the team updates throughout the project, surfaces hidden risks early, and creates a single source of truth for decisions like contingency, contract structure, and insurance.
Risk Categories on Commercial Construction
Design Risk
Incomplete documents, coordination gaps, code uncertainty, performance specification ambiguity.
Site Risk
Subsurface conditions, environmental contamination, utility conflicts, access constraints.
Schedule Risk
Long-lead equipment, permit delays, weather, labor availability, owner decisions.
Cost Risk
Material price volatility, scope growth, design changes, currency, escalation.
Quality Risk
Trade workmanship, specification clarity, inspection regimen, commissioning rigor.
Safety Risk
Trade-specific hazards, public exposure on occupied or urban sites, sequencing complexity.
Contract Risk
Liquidated damages, indemnification scope, insurance limits, dispute resolution mechanisms.
Operational Risk
Owner change in priorities, financing, market conditions, regulatory change.
The Risk Register Format
A usable risk register tracks the following columns at minimum:
- Risk ID and short description
- Category
- Probability (1–5 or low/med/high)
- Impact severity (cost, schedule, safety, quality)
- Risk score (probability × impact)
- Trigger event
- Mitigation actions and owner
- Residual risk after mitigation
- Status (open, closed, monitoring)
- Date last updated
Identifying Risks
- Risk workshops with the full project team at each major milestone
- Lessons learned from prior similar projects
- Industry checklists tailored to the project type
- Constructability review of design documents
- Geotechnical and environmental investigations
- Code analysis with the AHJ
- Insurance underwriter input
- Subcontractor outreach for trade-specific risks
Scoring Risk
A simple 5×5 matrix is enough for most projects. Score probability and impact each on a 1–5 scale and multiply for a 1–25 risk score. Critical risks (≥15) are escalated to executive review; major risks (8–14) get explicit mitigation plans; minor risks are monitored.
Mitigation Strategies
- Avoid, change scope or method to eliminate the risk (e.g., move a building to avoid contamination)
- Transfer, push risk to a party better able to bear it (insurance, surety, contract terms)
- Mitigate, reduce probability or impact (geotech investigation, partial early release, design contingency)
- Accept, retain the risk and budget contingency to cover it
Contingency without a documented risk register is a slush fund. With a register, you can show which contingency is allocated to which identified risk, releasing unused contingency as risks retire.
Drawing-Specific Risk Indicators
- High RFI count per sheet
- Disciplines issuing on different dates
- Late-stage scope additions or deletions
- Performance specifications without enough detail to bid
- Specifications conflicting with drawings
- BIM model not maintained beyond DD
- Sheet index references to sheets that don't exist
- Code summary missing or outdated for current edition
Keep exploring
Related guides for defect prevention, delivery, and document quality.