Risk Management in Construction: Tools and Techniques

1 year ago

Ashley

26 minutes

Introduction

Every construction project carries risk. Materials arrive late, ground conditions differ from the survey, subcontractors fail, costs escalate, programmes slip, and clients change their minds. The question is not whether risks will materialise but which ones, when, and at what cost. Risk management is the discipline of identifying those uncertainties before they become problems, quantifying their potential impact, and putting strategies in place to reduce, transfer, or absorb them.

For the quantity surveyor, risk management is not a separate activity bolted on to cost planning — it is embedded in almost everything the QS does. The cost estimate is built on assumptions, each carrying a degree of uncertainty. The contingency allowance is a risk provision. The contract conditions allocate risk between the parties. The monthly cost report monitors whether risks are materialising and what they are costing. The development appraisal tests viability under uncertainty. The QS who understands risk management tools — and can apply them systematically — is far more valuable than one who simply prices what is drawn.

This article covers the four principal risk management tools and techniques that every QS should understand: risk registers and risk matrices, quantitative risk analysis (including Monte Carlo simulation), contractual risk allocation across the main UK contract forms, and earned value management as a risk monitoring tool. A worked example applies all four to a live project scenario, and practical guidance addresses both students entering the profession and practitioners looking to sharpen their approach.

What Is Risk Management?

Risk management is the systematic process of identifying, assessing, responding to, and monitoring risks throughout a project’s lifecycle. The international standard ISO 31000 defines risk as “the effect of uncertainty on objectives” — a definition that applies perfectly to construction, where uncertainty affects cost, programme, quality, and safety objectives simultaneously.

The process follows a consistent cycle: identify risks (what could go wrong, what could go better than expected), assess their likelihood and impact (qualitative scoring or quantitative modelling), respond with appropriate strategies (avoid, reduce, transfer, accept), and monitor throughout the project to track whether risks are materialising and whether mitigation is working. This cycle repeats at every design stage — the risk profile at feasibility is fundamentally different from the risk profile at tender.

RICS’s Management of Risk guidance note (part of the Black Book suite) establishes the professional standard for QS risk management practice. It emphasises that risk management should be integral to cost planning from RIBA Stage 1, that risk allowances should be evidence-based rather than arbitrary percentages, and that the risk profile must be continuously reviewed as the project develops. NRM1 (New Rules of Measurement) defines the “risk allowance” as the amount added to the base cost estimate for items that cannot be precisely predicted — making explicit the link between risk management and the cost plan.

The QS’s Role in Risk Management

The QS contributes to risk management across the full project lifecycle, but the nature of that contribution changes at each stage.

At feasibility and brief (RIBA Stages 0–1), the QS identifies cost risks inherent in the project type, site, and market conditions. This includes flagging abnormal cost risks (ground conditions, contamination, existing services), assessing the accuracy range of the cost estimate (±20–30% at this stage), advising on contingency levels appropriate to the information available, and contributing to the development appraisal sensitivity analysis that tests viability under different risk scenarios.

At design development (RIBA Stages 2–3), the risk focus sharpens. The QS maintains the project risk register, updates risk allowances as design information improves and uncertainty reduces, advises on procurement strategy and its risk implications (which contract form, which pricing mechanism), and runs quantitative risk analysis on the cost plan to establish evidence-based contingency.

At procurement and construction (RIBA Stages 4–6), the QS manages risk through contract administration: assessing compensation events and variations, monitoring cost and programme performance using earned value techniques, triggering early warnings when performance indicators deteriorate, and reporting risk exposure in monthly cost reports. The QS also advises on value engineering opportunities that can reduce cost risk without compromising function.

At handover and close-out (RIBA Stage 7), the QS settles final accounts, resolves outstanding claims, and captures lessons learned — feeding risk data back into the practice’s knowledge base for future projects.

Risk Registers and Risk Matrices

The risk register is the foundational risk management tool. It is a structured record of identified risks, their assessment, ownership, mitigation actions, and status. Every construction project should have one, maintained by the QS or project manager from inception to completion.

What a Risk Register Contains

A well-structured risk register includes a unique risk identifier and description, the risk category (cost, programme, design, site, commercial, regulatory), the cause (what triggers the risk) and effect (what happens if it materialises), likelihood and impact scores, the calculated risk score, the risk owner (the person responsible for managing it), the mitigation strategy and specific actions, the residual risk score after mitigation, and the current status (open, closed, or transferred). The register is a living document — it should be reviewed and updated at every project meeting, not filed away after the initial workshop.

The 5×5 Risk Matrix

The risk matrix is the visual companion to the register. It plots each risk on a grid of likelihood (vertical axis) against impact (horizontal axis), producing a heat map that instantly communicates which risks demand attention. The standard 5×5 matrix uses the following scales.

Likelihood: 1 = Rare (less than 5% probability), 2 = Unlikely (5–20%), 3 = Possible (20–50%), 4 = Likely (50–80%), 5 = Almost certain (over 80%).

Impact: 1 = Negligible (less than 1% of budget), 2 = Minor (1–3% of budget), 3 = Moderate (3–7% of budget), 4 = Major (7–15% of budget), 5 = Catastrophic (over 15% of budget).

The risk score is the product of likelihood and impact, giving a range of 1 to 25. Risks are then RAG-rated: green (scores 1–6, acceptable with monitoring), amber (scores 8–12, require active mitigation), and red (scores 15–25, require immediate action or escalation). The matrix is not a precise measurement — it is a prioritisation tool that focuses management attention on the risks that matter most.

Risk Response Strategies

For each identified risk, the QS recommends one of four response strategies. Avoid means eliminating the risk entirely by changing the approach — for example, specifying a different foundation solution to avoid the risk of piling cost overruns. Reduce means taking action to lower the likelihood or impact — commissioning a ground investigation to reduce uncertainty about soil conditions. Transfer means passing the risk to another party better placed to manage it — typically through insurance (transferring fire risk to the insurer) or contract terms (transferring design risk to the contractor under a design-and-build contract). Accept means acknowledging the risk and provisioning for it in the contingency — appropriate where the cost of mitigation exceeds the expected cost of the risk itself.

QS-Specific Risk Categories

While generic risk registers cover broad categories (health and safety, environmental, reputational), the QS focuses on six categories that directly affect cost and commercial outcomes. Cost risk covers estimate accuracy, inflation, market conditions, and tender pricing. Commercial risk covers procurement route, payment terms, cash flow, and insolvency. Design risk covers scope creep, specification changes, buildability, and coordination failures. Programme risk covers delays that increase finance costs, trigger liquidated damages, or extend preliminaries. Site risk covers ground conditions, contamination, existing services, and access constraints. Regulatory risk covers planning conditions, Building Safety Act compliance, Building Regulations changes, and biodiversity net gain requirements.

Quantitative Risk Analysis

Qualitative risk assessment (the 5×5 matrix) is sufficient for most project-level risk management. But for major projects, funding applications, or planning viability assessments, a more rigorous approach is needed — one that produces a probability distribution of likely cost outcomes rather than a single point estimate. This is quantitative risk analysis (QRA), and the principal technique is Monte Carlo simulation.

How Monte Carlo Simulation Works

Monte Carlo simulation replaces each fixed cost estimate with a probability distribution. Instead of saying “substructure cost = £1.2 million,” the QS says “substructure cost is most likely £1.2 million, could be as low as £1.0 million (optimistic) or as high as £1.6 million (pessimistic).” These three-point estimates — optimistic, most likely, and pessimistic — define a triangular or PERT distribution for each cost element.

The simulation then runs thousands of iterations (typically 5,000–10,000). In each iteration, it randomly samples one value from each cost element’s distribution and sums them to produce a total project cost for that iteration. After all iterations are complete, the results form a probability distribution of total project cost — a histogram showing the range of likely outcomes and the probability of each.

Confidence Levels: P50, P80, P95

The output of a Monte Carlo simulation is reported as confidence levels — the percentile at which a given cost has a specified probability of not being exceeded.

Confidence Level	Meaning	Typical Use
P50 (50th percentile)	50% probability that actual cost will be at or below this figure	Base cost estimate; median outcome
P80 (80th percentile)	80% probability that actual cost will be at or below this figure	Recommended project budget; lender requirement
P90 (90th percentile)	90% probability of not exceeding	Management reserve; risk-averse clients
P95 (95th percentile)	95% probability of not exceeding	Near-worst case; equity sizing

The difference between P50 and P80 is the quantified risk allowance — the amount that should be added to the base estimate to provide an 80% confidence level. This is far more defensible than an arbitrary “10% contingency” because it is derived from the specific risk profile of the project. A straightforward new-build on a clear site might have a P50-to-P80 gap of 5–8%, while a complex refurbishment on a contaminated brownfield site might show a gap of 15–20%.

QS Application

The QS’s role in quantitative risk analysis is to assign the three-point estimates to each cost element (drawing on BCIS data, tender returns, and professional judgement), identify correlations between risks (if ground conditions are worse than expected, both substructure and programme costs increase), run the simulation using software such as @Risk (Palisade/Lumivero), Crystal Ball (Oracle), or even Excel with VBA macros, and present the results as a risk-adjusted cost plan showing P50, P80, and P95 outcomes with clear explanation of what each means.

For the QS student, understanding Monte Carlo at a conceptual level is essential — it is increasingly examined in APC assessments and university modules. For the practitioner, the ability to run and interpret QRA distinguishes a cost adviser from a cost reporter.

Contractual Risk Allocation

Every construction contract is fundamentally a risk allocation document. The contract terms determine which party bears the cost consequences of specific risk events — and the QS must understand these allocations to advise clients on procurement strategy, assess tender risk pricing, and manage post-contract claims and variations.

NEC4 Engineering and Construction Contract

The NEC4 ECC takes a distinctive approach to risk allocation. Client risks are explicitly listed in clause 80 — these are the events for which the Client bears the cost and programme consequences (including employer-caused delays, changes to the Works Information, unforeseen ground conditions differing from the Site Information, and force majeure events). All other risks, by implication, fall to the Contractor.

The NEC4 is unique among UK standard forms in its Early Warning Register (clause 15). Either party can notify an early warning of any matter that could increase total cost, delay completion, or impair performance. An early warning meeting is then convened to agree risk reduction actions. Critically, the Early Warning Register is a management tool, not a risk allocation tool — it does not determine who pays for the risk if it materialises. That is determined by the compensation event mechanism (clause 60).

The NEC4’s pricing options also affect risk allocation. Option A (activity schedule / lump sum) places cost risk with the Contractor — if actual costs exceed the activity prices, the Contractor absorbs the loss. Option C (target cost with pain/gain share) shares cost risk: savings below target are shared (typically 50/50), and overruns above target are also shared. Option C encourages collaborative risk management because both parties benefit from cost control.

JCT Design and Build 2024

The JCT DB places design risk squarely with the Contractor, who is responsible for both the adequacy and buildability of the design developed from the Employer’s Requirements. The Employer retains risk for site access, planning constraints, employer-instructed changes, and specified perils (fire, flood, storm). Extensions of time are granted for “Relevant Events” (employer-side risks) but not for contractor-caused delays.

The JCT approach is more adversarial than NEC — there is no equivalent of the Early Warning Register, and disputes are more commonly resolved through adjudication. The QS advising on a JCT contract must ensure that risks retained by the Employer are adequately provisioned in the project budget, and that risks transferred to the Contractor are fairly priced in the tender (an underpriced risk often re-emerges as a claim).

FIDIC (International Comparison)

For QS practitioners working internationally, FIDIC contracts offer a useful comparison. The Red Book (measured contract) places quantity risk with the Employer — the Contractor is paid for the actual quantities of work completed, not a fixed price. The Yellow Book (design and build) transfers both design and quantity risk to the Contractor. The Silver Book (EPC/turnkey) places the maximum risk on the Contractor, offering the Employer the highest price certainty but at a premium.

Risk Allocation Comparison

Risk Category	NEC4 Option A	JCT DB 2024	FIDIC Red Book
Design adequacy	Depends on scope split	Contractor	Employer (designer appointed by Employer)
Ground conditions	Client (if differs from Site Information)	Contractor (unless Employer provides data)	Employer (if unforeseeable)
Quantity risk	Contractor (lump sum)	Contractor (lump sum)	Employer (remeasured)
Employer changes	Client (compensation event)	Employer (variation)	Employer (variation)
Weather delays	Contractor (unless exceptional)	Contractor (limited EOT for specified perils)	Shared (exceptionally adverse)
Inflation	Contractor (unless Option X1 applied)	Contractor (fixed price)	Shared (if clause 13.8 applies)
Dispute mechanism	Adjudication → tribunal	Adjudication → arbitration/litigation	DAB → arbitration

QS Advisory Role

The QS advises the client on which contract form best suits the project’s risk profile. A project with high design uncertainty (refurbishment, complex M&E) may suit NEC Option C (shared risk) rather than JCT DB (contractor takes all). A project where the employer wants price certainty and is willing to pay a premium may suit JCT DB or FIDIC Silver Book. The QS also reviews tender returns to assess whether contractors have adequately priced the risks they are accepting — an unrealistically low tender often signals that risk has been underpriced, and the shortfall will re-emerge as claims during construction.

Earned Value Management and Early Warning

Risk identification and allocation happen before construction starts. Once work is underway, the QS needs monitoring tools that detect risks materialising in real time — before small variances become large problems. Earned value management (EVM) provides exactly this capability.

The Three EVM Measures

EVM compares three measures at any point during the project. Planned Value (PV) is the budgeted cost of work that should have been completed by the reporting date — essentially, the programme baseline expressed in cost terms. Earned Value (EV) is the budgeted cost of work that has actually been completed — the value of work done, measured against the original budget (not actual cost). Actual Cost (AC) is what has actually been spent to achieve the work completed.

From these three measures, two performance indices and two variance measures are derived.

Metric	Formula	Meaning	Trigger for Action
Cost Performance Index (CPI)	EV ÷ AC	Cost efficiency: value earned per £1 spent	CPI < 0.90 = significant overrun
Schedule Performance Index (SPI)	EV ÷ PV	Schedule efficiency: progress vs. plan	SPI < 0.90 = significant delay
Cost Variance (CV)	EV − AC	Positive = under budget; negative = over	CV < −5% of budget
Schedule Variance (SV)	EV − PV	Positive = ahead; negative = behind	SV < −5% of PV

QS Application in Construction

The monthly cost/value reconciliation (CVR) that the QS prepares on every construction project is, in essence, earned value management. The QS tracks the value of work completed (EV), the amounts certified and paid (AC), and the programme baseline cost flow (PV). Calculating CPI and SPI each month provides an objective, quantified early warning of cost or programme problems.

For example, if at month 9 of an 18-month project the CPI is 0.87 and the SPI is 0.92, the QS can report that for every £1 of value earned, £1.15 has been spent (13% cost overrun rate), and the project is 8% behind programme. If this trend continues, the estimate at completion (EAC) — calculated as the original budget divided by the CPI — will be 15% above the approved budget. This is actionable intelligence that triggers management intervention, not just a retrospective observation.

NEC4 Early Warning Integration

Under NEC4, the early warning mechanism (clause 15) provides the contractual framework for acting on EVM signals. When the QS detects a CPI or SPI below threshold (typically 0.90), this should trigger an early warning notification. The early warning meeting then brings the Project Manager, Contractor, and relevant specialists together to identify the cause and agree corrective actions.

This integration of quantitative monitoring (EVM) with contractual process (early warning) is one of the NEC4’s strongest features. It moves risk management from reactive (waiting for a claim) to proactive (detecting the problem and acting before it escalates). The QS who can connect the monthly cost data to the early warning process — and articulate the cost and programme implications — is delivering genuine risk management value.

EVM Limitations in Construction

EVM was developed for defence and aerospace projects with highly defined scope. Construction projects are messier — scope changes frequently, weather affects progress non-linearly, and measuring “percentage complete” on trades like M&E installation requires judgement. The QS should use EVM as a trend indicator rather than a precision instrument. A CPI that has fallen from 0.98 to 0.93 to 0.87 over three months tells a clear story, even if the absolute numbers carry some measurement uncertainty.

Worked Example: Coastal Hotel Refurbishment

To illustrate how these four tools work together in practice, consider a hotel project in a coastal town in South East England.

Project Brief

An independent hotel operator is refurbishing an existing 1960s hotel (40 bedrooms across three storeys) and building a new single-storey extension (20 bedrooms plus a conference suite). Total GIA is 3,200 m² (2,000 m² refurbishment, 1,200 m² new-build). The programme is 18 months with phased occupation — the existing hotel continues to trade during the works, with bedrooms taken out of service floor by floor. Construction budget is £8.5 million. The contract is JCT Design and Build 2024. The QS is appointed at RIBA Stage 1.

Tool 1: Risk Register Extract

The QS facilitates a risk workshop at Stage 1, identifying the following key risks (extract from a register of 35+ items):

Risk ID	Description	L	I	Score	Response
R-04	Existing structure: hidden defects in 1960s concrete frame (spalling, carbonation, inadequate reinforcement)	4	4	16	Reduce: commission structural survey before Stage 2; provisional sum for remedial works
R-07	Asbestos: ACMs likely in 1960s building (floor tiles, pipe lagging, textured coatings)	4	3	12	Reduce: R&D asbestos survey before tender; include removal scope in contractor’s design
R-11	Coastal exposure: salt spray damage to new extension envelope; corrosion risk to fixings	3	3	9	Reduce: specify marine-grade materials; additional maintenance allowance in life cycle cost
R-15	Phased occupation: hotel trading during works creates noise, dust, and access constraints; programme disruption	4	3	12	Reduce: detailed phasing plan; out-of-hours working for noisy trades; temporary screens
R-18	Labour shortage: specialist trades (M&E, plastering, joinery) in short supply in South East	3	4	12	Transfer: contractor bears labour risk under JCT DB; QS monitors tender pricing
R-22	Ground conditions: new extension on coastal clay; potential for shrinkage/heave; drainage complexity	3	3	9	Reduce: commission geotechnical investigation; design foundations to survey findings
R-28	Building Regulations Part L: enhanced thermal requirements may increase refurbishment cost beyond budget	3	2	6	Accept: allowance included in cost plan; monitor regulatory updates

The three red-rated risks (R-04 at 16, R-07 and R-15 both at 12) demand priority action. The QS recommends commissioning the structural survey and asbestos survey immediately — at a combined cost of approximately £15,000 — to convert these high-uncertainty risks into quantified scope items before tender. This is a core principle: spend a little to find out, rather than carry a large contingency for not knowing.

Tool 2: Quantitative Risk Analysis

At Stage 2, with the structural and asbestos surveys complete, the QS runs a Monte Carlo simulation on the £8.5 million cost plan. Three-point estimates are assigned to each cost element:

Cost Element	Optimistic	Most Likely	Pessimistic
Existing structure remediation	£280,000	£350,000	£520,000
Asbestos removal	£90,000	£120,000	£180,000
New extension substructure	£240,000	£280,000	£380,000
M&E services (refurb + new)	£1,800,000	£2,100,000	£2,500,000
Preliminaries (18-month programme)	£680,000	£750,000	£920,000
All other elements (aggregated)	£3,600,000	£3,900,000	£4,300,000

After 10,000 iterations, the simulation produces the following results: P50 = £8.35 million (the base cost plan is slightly above the median, which is expected given conservative estimating), P80 = £9.15 million, and P95 = £9.85 million. The P50-to-P80 gap is £800,000 — approximately 9.5% of the base estimate. This is the QS’s recommended risk allowance. It is specific to this project’s risk profile and substantially more defensible than a blanket 10% contingency.

The QS reports to the client: the approved budget of £8.5 million sits between P50 and P80. There is roughly a 60% probability of delivering within budget and a 40% probability of overrun. To achieve 80% confidence, the budget should increase to £9.15 million — an additional £650,000. The client can then make an informed decision: accept the 60% confidence level and manage risks aggressively, or increase the budget to improve certainty.

Tool 3: Contractual Risk Allocation

The project uses JCT Design and Build 2024. The QS advises the client on the risk allocation implications:

Risks transferred to the Contractor: design adequacy and buildability, labour availability and pricing, material procurement and supply chain, subcontractor performance, programme management (within the contract period), and the phasing logistics (managing the interface between trading hotel and construction works).

Risks retained by the Employer: employer-instructed changes to scope or specification, site access constraints beyond those described in the tender documents, planning conditions imposed after contract award, existing building defects not identified in the tender information (a critical point — the Employer must ensure the structural and asbestos surveys are issued as Employer’s Requirements to transfer informed risk to the Contractor rather than retaining uninformed risk).

The QS’s specific advice: include the structural survey report and asbestos R&D survey as part of the Employer’s Requirements. This transfers the risk of dealing with identified defects to the Contractor (who prices it in their tender) while the Employer retains risk only for genuinely unforeseen conditions. The alternative — withholding survey information and hoping for the best — creates an uninformed lump sum that will inevitably generate claims.

Tool 4: Earned Value Monitoring (During Construction)

At month 9 of the 18-month programme, the QS prepares the monthly cost report using EVM principles:

Measure	Value	Assessment
Planned Value (PV)	£4,800,000	Budget for work scheduled to month 9
Earned Value (EV)	£4,320,000	Value of work actually completed
Actual Cost (AC)	£4,650,000	Amount spent to date
CPI (EV ÷ AC)	0.93	7% cost overrun rate
SPI (EV ÷ PV)	0.90	10% behind programme
EAC (Budget ÷ CPI)	£9,140,000	Forecast outturn if trend continues
Variance from budget	+£640,000	7.5% projected overrun

The CPI of 0.93 and SPI of 0.90 both breach the 0.90 threshold. The QS raises a formal notification to the Contractor identifying the cost and programme variance, requests a recovery programme showing how the schedule deficit will be addressed, analyses the cost overrun sources (in this case, additional structural remediation beyond survey findings and M&E coordination delays), and recommends to the client that the management contingency be partially released (£200,000) to cover the identified additional structural works, while the remaining variance is addressed through contractor recovery measures.

This is EVM in action on a real project: quantified monitoring triggering specific management actions, not just retrospective reporting.

Current UK Context (2025–26)

Several factors make risk management particularly critical in the current market.

Cost Inflation

The BCIS Tender Price Index shows annual growth of 2.5% (2025) with forecasts rising to 3.0% for 2026. Labour costs are increasing faster — over 7% year-on-year — driven by the construction skills shortage and the April 2025 increase in employer National Insurance contributions. Building materials including concrete, steel, insulation, and timber have risen over 60% since 2020, though the rate of increase has moderated from the acute crisis of 2022–23. For the QS, inflation risk must be explicitly modelled in cost plans — either through a tender price inflation allowance or by including it as a variable in the Monte Carlo simulation.

Labour Shortage

The UK construction sector has lost approximately 250,000 workers (10% of its workforce) since the pandemic, and industry bodies estimate that an additional 239,000 workers are needed over the next five years to meet demand. The shortage is most acute in specialist trades: M&E engineers, bricklayers, plasterers, and joiners. For risk management, this means longer lead times for specialist subcontractors, higher tender pricing as contractors compete for scarce labour, and programme risk if key trades are unavailable when needed.

Supply Chain Volatility

Global supply chains remain fragile. US trade policy and tariffs are creating uncertainty for materials with international supply chains. Metals prices (copper, aluminium) are rising, affecting M&E components and specialist steelwork. Shipping route disruptions continue to add cost and lead time. The QS should maintain a supply chain risk register for major material packages and build procurement lead times into the programme — ordering steel or M&E equipment six months before it is needed on site, not three.

Regulatory Change

Three regulatory developments are adding cost and compliance risk. The Building Safety Act requires gateway approvals for higher-risk residential buildings, adding programme and consultant costs. Building Regulations Part L 2025 enhances thermal performance requirements, increasing material and design costs on refurbishment projects particularly. Biodiversity Net Gain (mandatory since February 2024) requires a minimum 10% improvement, adding ecological survey and mitigation costs. Each of these should be identified in the risk register with specific cost allowances.

Common Mistakes

Treating contingency as a design reserve. The most pervasive error. The contingency allowance is a risk provision — money set aside for identified risks that may or may not materialise. It is not a pot for scope changes, specification upgrades, or design development. When contingency is consumed by design changes rather than risk events, the project loses its risk buffer and any genuine risk that materialises causes a budget overrun. The QS must defend the contingency and insist that design changes are funded through value engineering or additional client funding, not by raiding the risk allowance.

Static risk registers. A risk register created at Stage 1 and never updated is worse than no risk register at all — it gives false assurance. Risks change as the project develops: some are eliminated (ground investigation confirms good conditions), new ones emerge (planning condition requires additional acoustic treatment), and the likelihood and impact of existing risks shift. The register should be reviewed at every design team meeting and formally updated at each RIBA stage gateway.

Arbitrary contingency percentages. Applying “10% contingency” to every project regardless of its risk profile is intellectually lazy and commercially dangerous. A new-build warehouse on a greenfield site has a fundamentally different risk profile from a listed building refurbishment on a contaminated brownfield site. The contingency should be derived from the risk register (qualitative) or Monte Carlo simulation (quantitative), not from habit.

Ignoring contractual risk allocation. The QS who prepares a cost plan without considering who bears each risk under the contract is producing an incomplete picture. If the contract transfers ground condition risk to the Contractor (as JCT DB typically does), the Contractor will price that risk in their tender — and the tender will be higher than the QS’s cost plan unless the QS has included a risk pricing allowance. Conversely, if the contract retains ground risk with the Employer (as NEC4 does for conditions differing from Site Information), the QS must provision for it in the project contingency.

Not acting on EVM signals. Calculating CPI and SPI is pointless if the numbers are buried in a monthly report that nobody reads. EVM metrics should trigger specific actions at defined thresholds — a CPI below 0.95 triggers a cost review, below 0.90 triggers a formal early warning, below 0.85 triggers a recovery plan and potential scope reduction. The QS should agree these thresholds with the project team at the outset and report against them monthly.

Underestimating refurbishment risk. New-build projects have lower inherent risk than refurbishment because the scope is defined from scratch. Refurbishment projects carry hidden risks — structural defects behind finishes, asbestos in concealed locations, services that do not match as-built drawings, and building fabric that performs worse than assumed. The contingency for refurbishment should be materially higher than for new-build (15–20% vs. 7–10% at feasibility), and the risk register should explicitly identify “opening up” risks.

Practical Guidance

For students: risk management is examined in every QS qualification pathway — RICS APC, university dissertations, and professional competency assessments. Understand the conceptual framework (ISO 31000, RICS Management of Risk), be able to construct a 5×5 risk matrix with worked examples, know the difference between qualitative and quantitative risk analysis, understand how NEC4 and JCT allocate risk differently, and be able to explain EVM metrics (CPI, SPI) in plain language. These are foundational competencies that distinguish a qualified QS from a measurer.

For practitioners: move beyond the risk register as a compliance document and make it a live management tool. Invest time in learning Monte Carlo simulation — even a basic Excel model with three-point estimates and 1,000 iterations produces dramatically better contingency advice than a fixed percentage. When advising on procurement, always map the risk allocation against the project’s specific risk profile and check that the contract form matches. Build EVM reporting into your monthly cost reports as standard practice, with agreed trigger thresholds for management action. And document your risk advice clearly — when the risk materialises (or does not), the audit trail demonstrates the quality of your professional judgement.

Invest in early information. The single most effective risk reduction strategy in construction is commissioning site investigations, surveys, and specialist reports early. A £15,000 structural survey that converts a £500,000 uncertainty into a £350,000 quantified scope item has reduced risk by £150,000 and improved the reliability of the cost plan and programme. The QS should advocate for early investigation at every opportunity — the cost of not knowing is always higher than the cost of finding out.

Communicate risk in terms the client understands. A risk score of 16 on a 5×5 matrix means nothing to a hotel operator. Translate it: “There is a 50–80% probability that the existing concrete frame will need £350,000–£520,000 of remedial work. We recommend commissioning a structural survey (£8,000) now to narrow this range before tender. Without the survey, we are carrying £170,000 of uncertainty that will either inflate the tender or emerge as a claim during construction.” That is risk communication that drives decisions.

External Resources

RICS Management of Risk, 1st Edition — the professional standard for risk management in QS practice, part of the Black Book suite.

NEC Risk Management Best Practice — NEC’s guidance on risk allocation and the Early Warning Register in NEC4 contracts.

Monte Carlo Simulation in Cost Estimating (PMI) — practical guidance on applying probabilistic cost modelling to construction projects.

NEC, JCT, and FIDIC: Key Differences — Hill Dickinson’s comparative analysis of the three main construction contract families.

Arcadis UK Construction Market View Spring 2026 — current market data on cost inflation, labour, and supply chain conditions.