Description

A focused course, tailored for you

Risk and Opportunity Management for Defense IT Programs

Structured methods for framing, quantifying, and presenting program risk and opportunity at every gate from capture to close-out.

The risk register is never the hard part. The hard part is standing in front of a program director, a contracting officer, or an IBR team and making the case for why a risk is amber not red, why an opportunity is real not wishful, and why the mitigation plan is credible. That case depends on specific artefacts, specific language, and a structured method most risk leads learn by trial and error across several programs.

$199 one-time

Tailored to your situation. Access within 24 hours. 30-day money-back.

Includes a hand-built implementation playbook delivered alongside course access, generated for your specific situation.

Why this course

Defense IT programs run on gate reviews, Independent Business Reviews, and periodic risk boards, each one demanding a slightly different frame for the same underlying data. A risk that reads as manageable in a monthly status deck can land as a schedule threat in an IBR if the quantification isn't tight. An opportunity that's been in the pipeline for two quarters loses credibility if the probability and value haven't been updated against actual capture progress. Risk and Opportunity leads at this level spend significant time translating between the technical team's assessment and the governance language the customer and program leadership expect. The courses that exist for this topic tend to be either too academic (PMI-RMP prep, theoretical frameworks) or too generic (enterprise ERM for financial services). Neither speaks to the specific artefacts a defense IT program risk lead actually produces: the risk and opportunity register, the probability-impact matrix, the opportunity realization plan, the risk burn-down chart, and the narrative sections of a CDRLs package.

What you walk away with

Produce a program risk register that meets DCSA, DCMA, and contracting officer expectations for format, probability calibration, and mitigation detail.
Construct an opportunity realization plan that survives scrutiny at a gate review, with quantified value, probability, and owner accountability baked in.
Frame risk narrative for a program director briefing in language that drives a decision, not a follow-up question.
Run a risk board meeting with the right agenda structure, the right attendee mix, and a clear decision log.
Produce the risk and opportunity sections of a CDRL package that passes a DCMA audit without a corrective action request.
Distinguish between risks that belong on the register, risks that belong in the issues log, and opportunities that need a separate realization track.

The 12 modules

Module 1. The Defense Acquisition Risk Framework

Walk through how DoD Instruction 5000.02 and the Risk Management Guide for Defense Acquisition Programs define risk categories, risk levels, and the relationship between technical, cost, and schedule risk. Understand how these definitions shape what a program office, a DCMA representative, and a contracting officer each expect to see in a risk deliverable, and why misalignment at this level causes most of the rework.

Module 2. Building a Register That Survives an IBR

The risk register is the primary artefact an Independent Business Review team interrogates. This module covers the field structure an IBR team expects, how to assign probability without over-claiming, how to write consequence statements that are specific enough to be actionable, and how to avoid the two most common register failures: risks so broad they mean nothing, and risks so granular they crowd out the signal.

Module 3. Probability-Impact Calibration

Most programs use a 5x5 matrix but calibrate it inconsistently, producing registers where a 30% probability item sits next to a 25% item assessed by a different method. This module builds a shared calibration approach: reference-class anchoring, subject matter expert elicitation protocol, and a documentation method that makes the probability defensible when an auditor asks how you got there.

Module 4. Writing Mitigation Plans That Close

A mitigation plan that never moves off the register is a liability. This module covers how to write mitigations with a specific owner, a specific action, a specific completion criterion, and a specific expected residual risk level. Includes the review cadence to build into the risk board charter, and the language that distinguishes a mitigation in progress from a mitigation that has stalled and should be escalated.

Module 5. Opportunity Identification and Qualification

Opportunity management often sits in the shadow of risk management on a program, with no equivalent register discipline. This module establishes the qualification criteria for an opportunity worth tracking: minimum probability threshold, minimum value threshold, and the relationship to a specific risk or scope change that makes the opportunity real. Covers the capture-phase opportunity versus the execution-phase opportunity, which have different owners and different realization paths.

Module 6. Building the Opportunity Realization Plan

The opportunity realization plan is the artefact a program director and a contracts team use to decide whether to pursue an opportunity or release the cost basis back to the program. This module covers the plan structure: opportunity description, realization trigger, responsible owner, probability and value tracking, and the decision gate at which the opportunity is either realized, expired, or transferred to a follow-on contract vehicle.

Module 7. Risk Burn-Down: Tracking Progress Without Gaming the Metric

The risk burn-down chart is a standard ask at monthly program reviews and CDRLs. It is also the metric most easily gamed by closing risks prematurely or holding risks open past their useful life. This module covers how to set the burn-down baseline, how to distinguish a risk that has genuinely closed from one that has been suppressed, and how to present the chart in a way that a program director reads as honest rather than optimistic.

Module 8. Preparing for the Risk Board

The risk board is not a status meeting. It is a decision meeting with a specific charter, specific inputs, and specific outputs. This module covers the agenda structure, the pre-read package, the decision log format, and the escalation protocol for risks that the board cannot close at the working level. Includes the facilitation techniques that keep a risk board from devolving into a technical deep-dive that produces no decisions.

Module 9. Translating Risk for Program Leadership

A program director reading a risk briefing is asking one question: what do you need from me? This module covers how to structure a risk narrative for leadership consumption: one summary frame, three to five items that require a decision or awareness, and a clear ask. Covers the difference between a briefing that informs and a briefing that drives action, and the specific language choices that signal credibility to a senior government customer.

Module 10. CDRL Risk Deliverables: Format and Compliance

Risk-related CDRLs, including the Risk Management Plan, the Risk Register, and periodic risk status reports, each have a Data Item Description that specifies content and format. This module walks through the most common DIDs, the fields a DCMA quality assurance representative checks, the common reasons a risk CDRL generates a corrective action request, and how to structure the document to make the compliance review straightforward.

Module 11. Capture Risk: Supporting the Bid Team

Risk and opportunity work at the capture phase is different from execution-phase risk management. The capture team needs a risk assessment that informs the bid price and the win strategy, not a register formatted for program execution. This module covers the capture risk taxonomy, the cost and schedule risk quantification method that feeds the pricing model, and the opportunity case that supports a bid decision.

Module 12. Building Your Repeatable Risk Practice

The final module assembles the templates, cadences, and governance touchpoints into a repeatable practice you can install on a new program within the first 30 days. Covers the risk management plan template, the register template, the board charter template, the CDRL shell documents, and the onboarding brief for a new program director who has not seen your risk approach before. All templates are included as downloadable artefacts.

How this addresses your situation

Specific modules that map to what you said you are dealing with.

IBR prep and register quality: Modules 1, 2, 3

Mitigation tracking and risk board facilitation: Modules 4, 8

Opportunity management and realization: Modules 5, 6, 11

Leadership briefing and CDRL compliance: Modules 7, 9, 10, 12

What you get with this course

12 written modules, each with worked examples drawn from defense IT program scenarios
Downloadable risk register template pre-formatted to IBR and CDRL expectations
Opportunity realization plan template with probability and value tracking fields
Risk board agenda and decision log templates
Risk management plan shell document formatted to common DID requirements
Probability calibration worksheet with reference-class anchoring guide
The hand-built implementation playbook, delivered alongside course access, tailored to a Risk and Opportunity Lead role on a defense IT program

What you will have in hand by Day 1, Week 1, Month 1

Course access and the tailored implementation playbook are provisioned within 24 hours of purchase.

Before and after

Before

The risk register is maintained but its credibility varies by reviewer. Some risks are too broad to act on, mitigation plans stall without a clear close criterion, and opportunity tracking is informal. Every gate review requires a rework pass to make the artefacts presentable.

After

A structured risk practice that produces consistent, defensible artefacts across gates, IBRs, and CDRLs. Leadership briefings that drive decisions. An opportunity register that the capture team and the program team both use. A risk board that closes items rather than recirculating them.

What happens if you do not address this

Program risk practices that develop informally tend to be invisible until an IBR or a DCMA audit surfaces the gap. By that point the corrective action is visible to the customer and the program record. The cost is not just the rework; it is the credibility of the risk function for the remainder of the program.

Who it is for

Risk and Opportunity Leads, Senior Risk Analysts, and Program Risk Managers on defense IT programs, typically at mid-to-senior level, responsible for maintaining the risk register, facilitating risk board meetings, producing risk-related CDRLs, and advising capture teams on opportunity qualification. They have hands-on program experience but have often not received structured training specific to the defense acquisition risk framework, and they learn the artefact expectations from colleagues or by reverse-engineering what auditors flag.

Who this is NOT for. Enterprise risk managers from financial services or insurance who need ERM frameworks rather than program-level risk management. PMI-RMP candidates looking for exam prep. Program Managers who need a broad PM methodology course rather than focused risk and opportunity work.

How it arrives

Text-based course in the Art of Service learning environment, plus downloadable templates and worked examples for every module, plus the hand-built implementation playbook delivered alongside course access.

Time investment. Approximately 6 to 8 hours across the 12 modules. Most participants read two to three modules per session and use the templates immediately on their current program.

Why $199 is the right number

PMI-RMP prep courses cover the theoretical framework but not the defense acquisition context or the specific artefacts a DCMA or contracting officer expects. Defense-specific risk training from the DAU is available but focused on program managers, not risk leads, and does not cover opportunity management or leadership narrative. This course covers the practical artefact set a risk lead actually produces on a defense IT program.

FAQ

Is this course specific to IT programs or does it cover hardware and systems programs as well?

The primary lens is defense IT and systems integration programs, but the register structure, board facilitation approach, and CDRL frameworks apply broadly to any defense acquisition program. The capture risk module is most directly applicable to IT and professional services bids.

Do I need a PMI-RMP or other certification before taking this course?

No. The course assumes hands-on program experience but does not require formal risk certification. If you are pursuing PMI-RMP, the module on the defense acquisition risk framework and the probability calibration module will reinforce the certification content with applied examples.

Can I use the templates on a current program immediately?

Yes. The templates are designed as working documents, not reference materials. The implementation playbook maps each template to the specific program phase and governance touchpoint where it is most useful.

30-day money-back guarantee. If after a week of working through the materials this is not what you needed, reply to the receipt email and a full refund is processed. No questions, no forms.

Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.