Sohaib Wasif Calgary on Risk Management: The Business Value of Quantified Risk Analysis
Many project risk registers provide visibility without delivering meaningful decision support. They often contain lengthy lists of potential issues, qualitative ratings, and color-coded impacts, but they may not connect directly to the cost forecast, schedule model, or contingency position. The risk management approach associated with Sohaib Wasif Calgary reflects experience on programs where risk information needed to support capital decisions, not simply satisfy a documentation requirement.
The distinction between useful risk management and administrative risk tracking is quantification. A risk described only as high probability and high impact provides limited actionable value. A risk assessed as having a defined probability, a credible cost range, schedule exposure, and a clear relationship to contingency gives sponsors and governance bodies information they can evaluate, challenge, and incorporate into capital planning.
What Quantified Risk Analysis Produces
Quantified risk analysis translates identified risks into probabilities and ranges of cost and schedule impact. When these inputs are modeled probabilistically, the result is not a single deterministic cost number but a distribution of potential project outcomes. That distribution allows decision makers to select a planning confidence level, such as P50 or P80, based on the organization’s risk tolerance, funding strategy, and governance expectations.
The career experience associated with Sohaib Wasif Calgary includes major programs at ExxonMobil, Ontario Power Generation, and TC Energy where contingency sizing and risk exposure required defensible analysis. In those environments, quantified risk analysis must withstand executive and governance review, making the quality of assumptions, probability ranges, and supporting evidence essential.
Contingency as a Governed Risk Reserve
Contingency should be managed as a quantified reserve tied to specific identified risks, not as an informal budget cushion. When contingency is treated as a general buffer, it can be gradually consumed during execution without a clear record of which risks materialized, which risks expired, and whether the remaining reserve still reflects the current risk position.
Disciplined contingency management requires each allocation to remain connected to a defined risk or risk category. When a risk expires, unused contingency should be released or reassessed. When a risk materializes, the drawdown should be documented and traceable. This ensures that contingency remains aligned with the risk register throughout execution rather than becoming absorbed into unexplained cost growth.
Change Control as a Core Risk Control
Uncontrolled scope change is one of the most significant drivers of cost growth on capital programs. Scope additions that bypass formal change control can become embedded in execution activity and later appear as unexplained variance. A rigorous change control process captures scope additions at the point of request, evaluates cost and schedule impact before approval, and ensures both the control budget and forecast remain aligned with the approved scope.
Effective change control must be established at the beginning of a program, before informal practices become embedded. Once cost growth has already occurred, introducing stronger discipline may improve future control but cannot fully recover the clarity lost during earlier execution. Early governance expectations, defined approval thresholds, and consistent documentation standards are essential to maintaining forecast integrity.
The program experience associated with Sohaib Wasif Calgary at TC Energy and Ontario Power Generation required change control discipline across multi-contractor, multi-year execution environments. That scale makes governance, traceability, and consistency especially important because even small unmanaged scope movements can compound into material capital exposure.
FAQ
What is a P80 cost outcome in probabilistic risk analysis?
A P80 cost outcome is the value at which 80% of modeled cost outcomes fall at or below the stated amount. Planning to a P80 level provides a more conservative funding position than planning to a P50 level because it reflects a higher confidence threshold. This approach may require more upfront capital authorization, but it provides stronger protection against credible risk scenarios and supports more transparent governance decisions.
How should contingency be sized on a major capital program?
Contingency should be sized through quantified risk analysis rather than as a fixed percentage of total estimated cost. A common approach compares the deterministic estimate with the selected probabilistic confidence level and allocates contingency based on the modeled exposure. Programs with greater technical complexity, regulatory uncertainty, market volatility, or execution risk typically require larger contingency because the range of potential outcomes is wider.
What makes a risk register actually useful for controls purposes?
A useful risk register is directly connected to the cost forecast, schedule model, and contingency position. It includes quantified probability and impact estimates, is updated throughout execution, and reflects the current risk profile rather than the profile established at sanction. It should also provide a clear audit trail showing which risks materialized, how associated contingency was used, and how remaining risk exposure affects the forecast.