Dynamic IT Risk Assessment & Mitigation System
Transforming IT risk management from a reactive panic into a proactive strategy. Identify, analyze, and track project threats in real-time to ensure the resilience of our digital initiatives.
Overcoming Optimism Bias
A Data-Driven Approach to IT Project Survival at Njala University
Information Technology projects have the highest failure rates globally due to rapid obsolescence and complex integration. Historically, risk assessment relies on subjective "gut feelings."
DIRAMS enforces a standardized, quantitative approach—ensuring institutional memory is preserved even when project teams change.
- 100% Data-Driven: Eliminates subjective guesswork with algorithmic scoring.
- 3 Risk Tiers: Clearly visualizes threats in Green, Amber, and Red zones.
- 24/7 Active Tracking: Transforms static spreadsheets into a living, automated repository.
Core System Modules
DIRAMS replaces static spreadsheets with a living risk register, utilizing automated tools to safeguard university infrastructure.
Heatmap Engine
Calculates Risk Scores using a Probability-Impact algorithm, visualizing threats in Red, Amber, or Green zones to prioritize responses.
Mitigation Library
Suggests standardized responses and contingency plans for common IT threats to drastically reduce administrative response time.
Automated Alerts
Utilizes integrated email notifications to alert designated Risk Owners when a specific trigger date or critical milestone is approaching.
Living Risk Register
Categorizes risks by domain (Security, Hardware, Human Resource) and generates exportable Risk Profile PDFs for stakeholder meetings.
Risk Severity Matrix
The Probability-Impact algorithm automatically categorizes identified threats into three distinct action levels.
Low Risk
Green Zone
Routine Operations
- Low Probability of occurrence
- Minimal operational impact
- Standard procedures apply
- Handled by immediate team
Medium Risk
Amber Zone
Mitigation Required
- Moderate threat to timeline
- Mitigation plan mandatory
- Tracked by Project Manager
- Regular status updates needed
Critical Risk
Red Zone
Immediate Action
- High threat of project failure
- Contingency plan activated
- Automated alerts triggered
- Escalated to Stakeholders