A risk register says “Operations” owns the supplier risk. Operations believes procurement is following it up. Procurement assumes the project manager is handling it. A project risk response needs a named person who can coordinate the agreed action, obtain decisions and keep the exposure visible.
Photo by Vitaly Gariev on Unsplash.
Writing a name beside a risk is only the start. Check that the person accepts the role and has a workable route to the authority, information and resources needed.
Separate coordination from individual actions
A risk owner can oversee the overall response while several action owners complete specific tasks. Make the distinction explicit. Otherwise each person may finish their task while assuming somebody else is checking whether the risk is still acceptable.
For example, one person might confirm a supplier date while another prepares an alternative work sequence. The overall owner brings the evidence together and recommends whether further action is needed.
Use a response ownership card
For each significant risk, record:
Risk event and project consequence.
Overall owner and agreed authority limits.
Intended response and why it is proportionate.
Individual actions, owners and needed-by dates.
Trigger or evidence that changes the response.
Contingency decision and who can authorise it.
Next review and current remaining exposure.
Avoid assigning ownership purely because someone is senior. Choose a person positioned to see the evidence and coordinate the response, then provide the escalation route they need.
An illustrative response
A project depends on a specialist who may be reassigned. The delivery lead owns the risk response, the line manager confirms availability, and a colleague prepares a limited knowledge transfer. If the availability decision remains unresolved by the agreed date, the sponsor decides which commitment takes priority.
These are hypothetical arrangements. The right split depends on actual management authority and the consequences of losing the specialist.
Test whether the action changes anything
At review, ask what has changed because of the response. Completing a reminder is different from receiving a credible commitment. If the action has not reduced uncertainty or protected an option, reconsider it.
Related guidance: small-team project planning guide.
Close or revise risks when the circumstances change, preserving the reasoning where useful. Hili Consulting can help turn risk ownership from a name in a register into a clear agreement about evidence, action and escalation.
