Risk Breakdown Structure (RBS)

A Risk Breakdown Structure categorises risks in a hierarchy, typically from broad categories at the top — technical risk, commercial risk, external risk, programme risk — down to specific risk sub-types at lower levels. Technical risk might break into design risk, construction risk, commissioning risk, and interface risk. Commercial risk might break into contractual risk, procurement risk, and stakeholder risk. The RBS provides a consistent taxonomy for classifying entries in the risk register, which makes it easier to identify concentrations of risk in particular areas, to compare risk profiles across projects, and to spot gaps where a category is suspiciously empty.

The main value of an RBS is forcing systematic thinking about risk categories before the risk identification exercise begins. If a facilitator walks into a risk workshop with a blank risk register, the team will tend to identify the risks that are most visible and most discussed — the obvious ones. Working through the RBS categories forces the conversation: 'We've identified lots of technical risks, but let's now think about commercial risks — what contract clauses, procurement uncertainties, or commercial interfaces could cause us problems?' This structured prompting reliably surfaces risks that a free-form brainstorm would miss.

The RBS also enables more meaningful risk reporting to senior stakeholders. Rather than presenting a list of 50 risks in a register, a risk manager can summarise by RBS category: 'We have ten technical risks of which three are rated high; four commercial risks of which one is rated high; and two external risks with low probability.' This category-level view is more actionable for a project board than a flat list. On large programmes with multiple contracts and sub-projects, the RBS provides a consistent classification scheme that makes portfolio-level risk aggregation possible — comparing risk profiles across packages and identifying programme-level themes that individual projects cannot see.