Article Risk & foresight ~8 minutes
Every project carries uncertainty: ground conditions, interfaces, supply, weather, people, permit windows, neighbour constraints. Pretending otherwise does not make a job safer or cheaper. Ignoring the list until something breaks is how uncertainty becomes crisis — and how crisis becomes a commercial and safety argument nobody prepared.
Courage on a project is not denial. Courage is naming uncertainty early enough to shape it, assigning an owner, and coming back when the job moves. The risk register is not a monthly photograph. It is foresight with a calendar.
What good risk practice looks like
Teams that handle risk well do a few unglamorous things consistently:
- They name risks early — in language the site and the office both understand.
- They score how likely and how bad in a shared way for that project, so comparisons mean something.
- They distinguish the world before controls from the world after planned mitigations — inherent versus residual.
- They put a person and a review date on each live risk so the list does not fossilise when people rotate.
- They say clearly whether a risk is owned, shared, or transferred — in language that matches the contract, not the mood of the meeting.
- They revisit, honestly, when design, sequence, or contractor feedback changes the story.
Standards and client risk management plans describe the same spine with denser words: identification, analysis, evaluation, treatment, monitoring. Site translation: can a competent stranger open the register next month and still tell what keeps the job awake — and what has been done about it since last review?
Good practice does not demand a novel for every yellow item. It demands that living risks have living ownership, and that steering packs stop treating a green matrix as proof that thought happened.
Portfolio view matters for directors. Completeness of a kick-off list is a weak signal. Overdue reviews, rising residual, and ownerless rows are stronger. If the portfolio can only see “registers exist,” it cannot see which jobs are navigating blind.
Where projects slip
- The risk register is a kick-off artefact that nobody opens again until audit or board week.
- Scores are political (“must look green”) rather than useful for decisions.
- Mitigations are slogans (“monitor carefully”) with no action, owner, or evidence of effect.
- Reviews slip until a near-miss forces a rewrite under stress.
- Portfolio leaders cannot see which job is carrying silent, overdue reviews.
- Ownership language floats in corridors while the register stays politely blank.
The failure mode is decoration: a matrix that photographs well while residual truth ages in silence. When score theatre replaces review, the organisation trains itself to manage slides instead of uncertainty.
How Cynilo supports this practice
Cynilo gives the project a risk register that stays with the job — not a slide deck that leaves with the facilitator.
- Risks live as records with ownership and review cadence.
- Inherent and residual thinking stays visible so “we mitigated it” is more than a vibe.
- Review pressure can surface on dashboards when dates slip.
- The story of score changes can be retained — so you can show how judgement moved over time.
Help how-tos cover creating and reviewing a risk. Learn is for agreeing that the register is part of running the job — not a compliance ornament. The product does not invent your risk categories; it makes the industry habit — name, own, treat, review — harder to abandon under programme heat.
What good looks like in a week
In a normal week on a job that keeps the plot:
- New threats from design changes or contractor feedback enter the register quickly.
- Owners get reminded before reviews go stale — and deferred reviews carry reasons.
- High residual risks still have visible mitigations and escalate into programme or commercial conversations.
- When senior visitors ask “what keeps you awake?”, the answer is coherent and shared.
- Closed risks leave a short trail of why they stopped mattering.
Night shifts and interface weekends are the stress test. If the register only wakes for Tuesday steers, foresight is a daylight hobby.
Design changes and contractor feedback are how new threats enter. A register that only grows at kick-off is a museum. A register that absorbs weekly reality is a tool.
A short story from an interface-heavy civils package
An interface-heavy civils package ran an impressive kick-off register — sixty items, tidy scores, named owners. By month four, twenty owners had rotated, review dates sat three months stale, and the top risks still photographed the same for the client pack. A late survey change quietly shifted ground-risk residual; the matrix did not. When a related delay hit, the commercial argument was not only about entitlement — it was about whether anyone had been managing the uncertainty they claimed to see.
Recovery was cultural. The PM halved the live list to what still mattered, forced fresh owners, and required residual movements to cite actual mitigation. Steering packs got shorter. Conversations got sharper. Uncertainty did not vanish; the plot returned.
Closing
Uncertainty is normal. Losing the plot is optional. This series walks the habits that keep foresight honest: review that actually happens, residual risk told without theatre, and ownership language that matches the contract.
Next in the series: Risk that is reviewed, not parked — cadence and owners that keep the register alive.
In the product: Help → How-to → Risk register.
Topics:
Modules in Cynilo:
In the product: open Help → How-to when you need specific actions in Cynilo. Learn stays on industry practice.
Previous: Questions you can rely on
Next: Handover while you build