GenAI and the New Era of Risk Management
- Erwin Limon

- Aug 16
- 6 min read
Smarter Project Management Through AI, Community, and Better Risk Decisions
Erwin Limon • Manila • August 2026
Introduction
In IT projects, risk rarely announces itself loudly. More often, it starts with familiar lines:
“We can clean the data later.” “Users will adapt after go-live.” “The integration is almost done.” “Let’s monitor it during hypercare.”
In an ERP migration, these small comments can become major business problems if they are not captured, assessed, owned, and acted on early.
A classic example is Hershey’s ERP implementation in the late 1990s. The company was rolling out major ERP, supply chain, and customer relationship systems, but issues around timing, readiness, and order fulfillment affected its ability to process and ship orders during a critical sales period.
The lesson still applies today: ERP migration is not just a technology project. It is a business readiness project.
As of August 2026, Generative AI is becoming practical tools in Project management in the Philippines and across global teams. They help project managers summarize updates, analyze risks, draft reports, and spot patterns faster.
But GenAI does not replace project managers. It helps them see risks earlier and manage them with better structure.

30-Year Evolution of Risk Management
Over the last 30 years, risk management has moved from manual tracking to AI-supported insight.
The goal has not changed: identify uncertainty, understand impact, assign ownership, and protect business value.
What changed is the speed and volume of information. Risks now appear in meeting notes, defect logs, vendor updates, chat messages, testing results, and status reports.
This is where GenAI helps.
It can scan project inputs, detect patterns, summarize possible risks, draft risk statements, and prepare risk register entries.
The modern model is simple:
GenAI supports the analysis. Project managers provide the judgment. Teams own the actions.
Critical Risk Areas and Possible Impacts

The ERP may be new, but the risks are usually old friends wearing new clothes.
The Hidden Risk: The Old System Is Not Fully Understood
One common ERP migration trap is assuming everyone fully understands the old system.
Usually, they do not.
Legacy systems often contain:
Custom fields no one remembers
Reports built on old assumptions
Manual workarounds outside the system
Business rules known only by a few users
Approval exceptions handled through email
Integrations with limited documentation
Spreadsheets acting as unofficial systems
This is where migration becomes less like implementation and more like archaeology. A team may think it is migrating “active customer records,” only to discover that Sales, Finance, and Operations define “active customer” differently. That is not just a data issue. That is a business alignment issue. Good risk management helps surface these assumptions early before they become expensive surprises.
Where GenAI Helps
ERP migration projects generate a lot of information:
Meeting notes
Status reports
RAID logs
Defect logs
Data migration reports
UAT feedback
Vendor updates
Cutover plans
Training feedback
Steering committee actions
GenAI can help identify patterns across these inputs.
For example, different updates may mention:
Duplicate vendor records
Missing tax fields
Failed mock migration
Delayed finance validation
Unclear data ownership
GenAI can turn those scattered signals into a draft risk:

This is the practical value of Generative AI in risk management: it turns project noise into structured insight.
But AI output must still be reviewed. GenAI can draft the risk. People must validate it.
Qualitative and Quantitative Risk Assessment
A good risk assessment should include both qualitative and quantitative views.
Qualitative Assessment
Qualitative assessment uses ratings like Low, Medium, and High

This helps the team quickly prioritize what needs attention.
Quantitative Assessment
Quantitative assessment adds numbers.
Risk Exposure = Probability x Estimated Cost Impact

This helps leaders compare risks more clearly.
The numbers do not need to be perfect. They need to be transparent enough to support better decisions.
Quick Use Case: GenAI-Assisted Risk Assessment
Scenario:
An ERP migration team has new project inputs:
UAT results
Data migration mock run report
Integration defects
Vendor update
Cutover checklist
Stakeholder meeting notes
RAID log entries
The project manager wants to:
Identify risks.
Assess them qualitatively and quantitatively.
Draft risk register entries.
Add approved risks to the risk log.
Notify the assigned owner.
Sample GenAI Prompt
You are assisting an IT project manager with risk management for an ERP migration project.
Project context:
We are migrating from an old ERP system to a newer cloud ERP platform. The project covers finance, procurement, inventory, reporting, integrations, user roles, data migration, cutover, training, and post-go-live support.
Analyze the following project inputs:
[Paste or attach UAT results, data migration report, integration defect log, vendor update, cutover checklist, stakeholder meeting notes, and RAID log entries.]
For each identified risk, provide:
1. Risk ID
2. Risk title
3. Risk description
4. Root cause
5. Affected business area
6. Risk category
7. Qualitative assessment:
- Probability: Low, Medium, High, Moderate, Significant, Critical
- Impact: Low, Medium, High
- Overall rating: Low,
8. Quantitative assessment:
- Probability percentage
- Estimated cost impact in USD
- Estimated schedule impact in days
- Risk exposure calculation
9. Response strategy: Avoid, Mitigate, Transfer, Accept, Escalate
10. Mitigation actions
11. Contingency plan
12. Suggested risk owner
13. Early warning indicators
14. Escalation trigger
15. Confidence level
16. Human approval required
Important:
- Do not invent facts.
- State assumptions clearly.
- Separate confirmed risks from assumptions.
- Flag risks that may affect go-live readiness.
- Format output as a structured table.
Why Human Judgment Still Matters
GenAI can analyze quickly, but it does not fully understand every business context.
It may not know who the real decision-maker is. It may not know why a reporting gap matters to compliance. It may not detect that a “temporary workaround” has quietly become business-critical.
Project managers still need to:
Validate AI output
Challenge assumptions
Confirm ownership
Prioritize business impact
Escalate at the right time
Communicate clearly
As of August 2026, the best use of GenAI in project management is not blind automation. It is guided acceleration.
Why Project Community Is a Must
This is why project community is a must: project managers should not have to learn every lesson the hard way.
No one becomes strong in risk management purely by reading templates. Real growth comes from experience, reflection, mistakes, recovery, and stories from other project leaders.
A project community gives access to:
Shared lessons learned
Practical tools
Peer mentoring
Industry insights
Leadership development
Real project stories
Support during complex delivery challenges
This matters even more now that Generative AI is changing how teams work.
Project managers need spaces to discuss:
How are others using GenAI?
What should not be automated?
How do we validate AI-generated risk assessments?
How do we protect confidential project data?
How do we balance speed with accountability?
These are leadership questions, not just tool questions.
For those practicing Project management in the Philippines, the PMI Philippines chapter provides a space to connect with peers, learn from other industries, and stay current with trends like GenAI, automation, and modern risk management.
The chapter also creates opportunities for Project management volunteers to grow as leaders.

How Community Improves Risk Management
A strong project community improves risk management in practical ways.
It helps project managers recognize patterns earlier:
Unclear ownership becomes delay.
Weak testing becomes instability.
Poor data quality becomes rework.
Late training becomes adoption risk.
Silent stakeholders become late escalations.
It also gives access to lessons learned:
Start data cleansing early.
Do not treat UAT as a checkbox.
Test end-to-end scenarios.
Validate reports before go-live.
Define decision owners clearly.
Plan hypercare properly.
Escalate risks before they become emergencies.
Community builds confidence. It reminds project managers that escalation is not negativity. It is responsible leadership. Technology improves speed. Community improves judgment.
That is why the PMI Philippines Chapter, Project management volunteers, and professional networks matter.
GenAI in Modern Project and Risk Management
GenAI is becoming a practical tool in modern project management. They can help identify risks earlier, assess impact faster, and automate parts of the risk management workflow.
But the future of risk management is not about letting AI run the project.
It is about combining:
The speed of GenAI
The discipline of risk management
The judgment of project managers
The accountability of risk owners
The support of a project community
ERP migration will always carry uncertainty. Data may be messy. Integrations may be delayed. Users may need more support. Cutovers may be harder than expected.
But with the right approach, risks can be made visible earlier, assessed more clearly, assigned properly, and managed before they become business issues.
The goal is not just to go live.
The goal is to go live with readiness, ownership, and confidence. And that is exactly why project community is a must — because tools help us work faster, but people help us become better project leaders.
References
CIO, 18 famous ERP disasters, dustups, and disappointments
Panorama Consulting Group, Top 10 ERP Failures of the Last Three Decades
Microsoft Cloud Blog, AI-powered success with more than 1,000 stories of customer transformation and innovation
PMI Philippines Chapter official website
Project Management Institute — Philippines Chapter membership page
https://www.pmi.org/shop/tb/p-/chapter-membership/philippines-chapter/101121


Comments