Understanding and improving your risk management capability: Assessment model for construction organizations

Implementing risk management in construction projects and organizations may bring a number of benefits and therefore it is necessary to have risk management as an integral part of a construction organization's management practice. The aim of this paper is to develop a risk management maturity assessment model for construction organizations. The paper describes the development process of a Web-based RM3 (risk management maturity model), including its contents, its validation and testing, as well as its applications. The RM3 developed has five attributes namely, management, risk culture, ability to identify risk, ability to analyze risk, and application of standardized risk management process/system. These attributes are measured against four levels: initial, repeated, managed, and optimized. It is found that the proposed RM3 was suitable and useful. Using the RM3, it is found that the Australian construction industry's overall risk management maturity level was relatively low (where 32% rated at Level 2 and 52% rated at Level 3). Furthermore, it is found that the weakest attribute was "analyzing risks" followed by "application of standardized risk management process." It is therefore necessary to provide more training on qualitative and quantitative risk analysis to construction personnel and to develop and apply standardized enterprise risk management. It is concluded that the proposed RM3 is suitable for construction organizations to assess their risk management maturity levels and find ways for improvement.