FprEN IEC 62198:2024

SLOVENSKI STANDARD
oSIST prEN IEC 62198:2024
01-februar-2024
Upravljanje projektnih tveganj - Smernice za uporabo
Managing risk in projects - Application guidelines
Risikomanagement für Projekte - Anwendungsleitfaden
Gestion des risques liés à un projet - Lignes directrices pour l'application
Ta slovenski standard je istoveten z: prEN IEC 62198:2023
ICS:
03.100.01 Organizacija in vodenje Company organization and
podjetja na splošno management in general
oSIST prEN IEC 62198:2024 en
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

oSIST prEN IEC 62198:2024
oSIST prEN IEC 62198:2024
56/2017/CDV
COMMITTEE DRAFT FOR VOTE (CDV)
PROJECT NUMBER:
IEC 62198 ED3
DATE OF CIRCULATION: CLOSING DATE FOR VOTING:
2023-12-01 2024-02-23
SUPERSEDES DOCUMENTS:
56/1983/CD, 56/2005/CC
IEC TC 56 : DEPENDABILITY
SECRETARIAT: SECRETARY:
United Kingdom Ms Stephanie Lavy
OF INTEREST TO THE FOLLOWING COMMITTEES: PROPOSED HORIZONTAL STANDARD:

Other TC/SCs are requested to indicate their interest, if
any, in this CDV to the secretary.
FUNCTIONS CONCERNED:
EMC ENVIRONMENT QUALITY ASSURANCE SAFETY
SUBMITTED FOR CENELEC PARALLEL VOTING NOT SUBMITTED FOR CENELEC PARALLEL VOTING
Attention IEC-CENELEC parallel voting
The attention of IEC National Committees, members of
CENELEC, is drawn to the fact that this Committee Draft
for Vote (CDV) is submitted for parallel voting.
The CENELEC members are invited to vote through the
CENELEC online voting system.
This document is still under study and subject to change. It should not be used for reference purposes.
Recipients of this document are invited to submit, with their comments, notification of any relevant patent rights of
which they are aware and to provide supporting documentation.
Recipients of this document are invited to submit, with their comments, notification of any relevant “In Some
Countries” clauses to be included should this proposal proceed. Recipients are reminded that the CDV stage is
the final stage for submitting ISC clauses. (SEE AC/22/2007 OR NEW GUIDANCE DOC).

TITLE:
Managing risk in projects - Application guidelines

PROPOSED STABILITY DATE: 2026
NOTE FROM TC/SC OFFICERS:
electronic file, to make a copy and to print out the content for the sole purpose of preparing National Committee positions.
You may not copy or "mirror" the file or printed version of the document, or any part of it, for any other purpose without
permission in writing from IEC.

oSIST prEN IEC 62198:2024
oSIST prEN IEC 62198:2024
– 2 – IEC CDV 62198 © IEC:2023
1 CONTENTS
2 CONTENTS . 2
3 FOREWORD . 4
4 INTRODUCTION . 6
5 1 Scope . 7
6 2 Normative references . 7
7 3 Terms and definitions . 7
8 4 Managing risks in projects . 10
9 5 Principles . 12
10 6 Project risk management framework . 13
11 6.1 General . 13
12 6.2 Leadership and commitment . 14
13 6.3 Design of the framework for managing project risk . 15
14 6.3.1 Understanding the project and its context . 15
15 6.3.2 Establishing the project risk management policy . 15
16 6.3.3 Accountability . 16
17 6.3.4 Integration into project management processes . 17
18 6.3.5 Resources . 17
19 6.3.6 Establishing internal project communication and reporting
20 mechanisms . 17
21 6.3.7 Establishing external project communication and reporting
22 mechanisms . 18
23 6.4 Implementing project risk management . 18
24 6.4.1 Implementing the framework for managing project risk . 18
25 6.4.2 Implementing the project risk management process . 18
26 6.5 Monitoring and review of the project risk management framework . 19
27 6.6 Continual improvement of the project risk management framework . 19
28 7 Project risk management process . 19
29 7.1 General . 19
30 7.2 The project risk management plan . 20
31 7.3 Communication and consultation . 21
32 7.4 Scope, context and criteria. 22
33 7.4.1 General . 22
34 7.4.2 Defining the scope . 22
35 7.4.3 Establishing the external context . 22
36 7.4.4 Establishing the internal context . 23
37 7.4.5 Establishing the context of the project risk management
38 process . 23
39 7.4.6 Defining risk criteria . 23
40 7.4.7 Key elements . 24
41 7.5 Risk assessment . 25
42 7.5.1 General . 25
43 7.5.2 Risk identification . 25
44 7.5.3 Risk analysis . 26
45 7.5.4 Risk evaluation . 27
46 7.6 Risk treatment . 27
47 7.6.1 General . 27
48 7.6.2 Selection of risk treatment options . 28

oSIST prEN IEC 62198:2024
IEC CDV 62198 © IEC:2023 – 3 –
49 7.6.3 Risk treatment plans . 28
50 7.7 Monitoring and review . 29
51 7.7.1 General . 29
52 7.8 Recording and reporting the project risk management process . 30
53 7.8.1 Reporting . 30
54 Records and data storage . 31
7.8.2
55 7.8.3 The project risk register . 31
56 Annex A (informative) Examples . 33
57 A.1 General . 33
58 Project risk management process . 33
A.2
59 A.2.1 Stakeholder analysis (see 7.3) . 33
60 A.2.2 External and internal context (see 7.4.3 and 7.4.4) . 34
61 A.2.3 Risk management context (see 7.4.5) . 36
62 A.2.4 Risk management context for a power enhancement project . 36
63 A.2.5 Risk criteria (see 7.4.6). 37
64 Key elements (see 7.4.7) . 38
A.2.6
65 A.2.7 Risk analysis (see 7.5.3) . 39
66 A.2.8 Risk evaluation (see 7.5.4) . 42
67 A.2.9 Risk treatment (see 7.6) . 43
68 A.2.10 Risk register (see 7.5.2 and 7.8.3) . 43
69 Bibliography . 45
71 Figure 1 – Relationship between the components of the framework for managing risk,
adapted from ISO 31000 . 14
73 Figure 2 – Project risk management process, adapted from ISO 31000 . 20
Figure A.1 – Risk management scope for an open pit mine project . 37
75 Figure A.2 – Distribution of cost estimate using simulation (example only) . 42
77 Table 1 – Typical phases in a project . 11
Table A.1 – Stakeholders for a government project . 33
79 Table A.2 – Stakeholders and objectives for a ship upgrade . 34
Table A.3 – Stakeholders and communication needs for a civil engineering project . 34
81 Table A.4 – External context for an energy project . 35
Table A.5 – Internal context for a private sector infrastructure project . 36
83 Table A.6 – Criteria for a high-technology project . 37
Table A.7 – Key elements for a communications system project. 38
85 Table A.8 – Key elements for establishing a new health service organization . 38
Table A.9 – Example consequence scale . 40
87 Table A.10 – Example likelihood scale . 40
Table A.11 – Example of a matrix for determining the level of risk . 41
89 Table A.12 – Example of priorities for attention . 43
Table A.13 – Example of a treatment options worksheet . 43
91 Table A.14 – Simple risk register structure . 44
Table A.15 – Example scale for control effectiveness (CE) . 44
oSIST prEN IEC 62198:2024
– 4 – IEC CDV 62198 © IEC:2023
95 INTERNATIONAL ELECTROTECHNICAL COMMISSION
96 ____________
98 MANAGING RISK IN PROJECTS –
99 APPLICATION GUIDELINES
101 FOREWORD
102 1) The International Electrotechnical Commission (IEC) is a worldwide organization for standardization comprising
103 all national electrotechnical committees (IEC National Committees). The object of IEC is to promote international
104 co-operation on all questions concerning standardization in the electrical and electronic fields. To this end and
105 in addition to other activities, IEC publishes International Standards, Technical Specifications, Technical Reports,
106 Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC Publication(s)”). Their
107 preparation is entrusted to technical committees; any IEC National Committee interested in the subject dealt with
108 may participate in this preparatory work. International, governmental and non-governmental organizations liaising
109 with the IEC also participate in this preparation. IEC collaborates closely with the International Organization for
110 Standardization (ISO) in accordance with conditions determined by agreement between the two organizations.
111 2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international
112 consensus of opinion on the relevant subjects since each technical committee has representation from all
113 interested IEC National Committees.
114 3) IEC Publications have the form of recommendations for international use and are accepted by IEC National
115 Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC
116 Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any
117 misinterpretation by any end user.
...