Risk Potential Assessment
A Risk Potential Assessment (RPA) is a form that helps determine the level of assurance and support your project needs.
It is mandated by the Scottish Public Finance Manual (SPFM) for core Scottish Government (SG), Executive Agencies, non-ministerial departments and SG sponsored bodies carrying out major investment projects.
Other organisations within the Technology Assurance Framework are encouraged to have RPAs in place.
Benefits of risk assessment
Completing an RPA early and reviewing it regularly helps you:
- identify potential risks and understand their impact if the project fails
- clarify roles and responsibilities for successful delivery
- recognise any specific skills needed for the project
- determine the right level of independent project assurance
- identify any risks that may need to be managed during project delivery and beyond
An RPA also improves your project’s chances of success by:
- giving the Senior Responsible Owner an independent review of whether the project is on track
- offering recommendations to reduce risks
- reassuring stakeholders that the project is being well-managed
- providing a clear assessment of whether the project is ready for the next stage
Forms you need
RPA1 is a form that helps you assess how complex or strategically important your project is. You should complete it as early in your project as possible.
If your project is rated as medium or high risk, you must complete RPA2 to decide whether it needs support from the Scottish Government Gateway Review process.
If your project is rated as low risk, you should carry out regular self-assessments to ensure it stays on track.
You can request RPA forms and self-assessment checklists from PPPAssurance@gov.scot.
Guidance for other sectors
Some sectors have specific requirements for evaluating and assuring successful project delivery.
This includes the health sector which should follow the processes described in the NHS Scotland Scottish Capital Investments Manual.
Public bodies that are not covered by the SPFM should still carry out assurance checks at key decision points, especially for complex or critical projects. These checks should be done independently of the project team to ensure objective oversight.
Further information
Risk management advice is available in the Scottish Public Finance Manual. Further guidance is available in the Orange Book published by HM Treasury.
If you need additional advice on how to complete the RPA forms, contact PPPAssurance@gov.scot.