Portfolio Risk Factors

A Portfolio Risk Factor is a strategic risk dimension that portfolio leadership defines once and applies to every project in the portfolio. It is not a specific risk event — it is an evaluation criterion. Examples: “Regulatory exposure,” “Supply chain fragility,” “Technology maturity,” “Geopolitical sensitivity.”

Think of Portfolio Risk Factors as the columns in your strategic risk scorecard. Every project gets assessed against each column.

Portfolio Risk Factor fields

Field	What it means
Title	Name of the risk dimension (e.g. “Regulatory exposure”)
Description	Explanation of what this dimension measures and why it matters
Evaluation Weight	How much this factor counts relative to others in portfolio scoring
Active	Whether this factor is currently in use

Portfolio Risk Factors belong to a Portfolio. They are defined by portfolio leadership and rarely change — they represent the strategic lens through which the portfolio evaluates risk.

Risk Factor Score

A Risk Factor Score is one project’s assessment against one Portfolio Risk Factor. Where the factor is the question, the score is the answer.

Field	What it means
Answer	The project’s score or rating on this factor
Assessed At	Date the assessment was made
Assessed By	Employee who made the assessment

Each Risk Factor Score belongs to both a project and a Portfolio Risk Factor. Over time, as projects are scored, the portfolio leadership gains a structured view of risk exposure across all projects.

How the framework works

1. Portfolio leadership defines the factors — choose dimensions that matter strategically to your portfolio. Set weights to reflect relative importance.
2. Projects get scored — for each active project, someone assesses it against each factor and records the date.
3. The portfolio view emerges — with scores across all projects and all factors, leadership can compare risk profiles, spot concentrations, and make informed prioritisation decisions.

Example

A portfolio might define three factors:

Factor	Weight	Description
Regulatory exposure	30%	How heavily is this project subject to regulatory change or approval?
Supply chain fragility	40%	How dependent is this project on a small number of suppliers?
Technology maturity	30%	How proven is the core technology this project depends on?

A project building on an experimental technology sourced from a single supplier in a regulated sector would score high on all three — making its risk profile clearly visible to the portfolio team.

For Executives

Portfolio Risk Factors are your strategic risk scoreboard. Define them carefully at the start of a portfolio cycle. Weight them to reflect your organisation’s actual risk priorities. Use them to compare projects, not just to rate them individually.

Caution

Portfolio Risk Factors are not connected to Project Risks. A project with zero entries in its risk register can still score high on “Regulatory exposure” — because that factor reflects strategic exposure, not the completeness of the operational risk log. See The Two Risk Worlds.