The Risk Data Engine

A risk model without a traceable, quantifiable foundation is not an analysis. It is an opinion with a histogram attached.

The Risk Data Engine is IQRM's proprietary methodology for replacing workshop-derived three-point estimates with calibrated probability distributions extracted from real project data. It is the foundation underneath every QSRA, QCRA, and Risk Radar that IQRM delivers.

Proprietary IQRM methodology Approved Saudi Aramco vendor ADNOC approved consultant UK and GCC
Approved Saudi Aramco vendor ADNOC approved consultant 3 engagements per month Delivered in Safran Risk
The core problem

Monte Carlo simulation is a mathematical engine. It does not know whether its inputs are evidence or opinion.

The histogram looks the same either way. The S-curve renders. The P80 number appears in the report. And for the last twenty years, the industry has accepted this as quantitative risk analysis.

It is not. It is qualitative inputs dressed in quantitative clothing. The moment the executive committee asks "how did you arrive at the optimistic, most likely, and pessimistic values?", the analysis collapses to its true foundation: a room full of people agreeing on numbers.

The Risk Data Engine exists to solve this at the only layer that matters: the input layer. Not better software. Not more iterations. Not smarter visualisation. Better inputs. From real data. Traceable. Defensible.

The quality of a Monte Carlo forecast is determined entirely at the input layer. Everything after that is mathematics.
How it works

Five project data domains in. Defensible Monte Carlo forecast out.

The Risk Data Engine extracts, analyses, and calibrates data from your project records into probability distributions that feed the Monte Carlo model.

Productivity Procurement Progress Performance Resources REAL PROJECT DATA Calibrate + fit distributions Defensible Monte Carlo Forecast P50 / P80 / P90 RISK DATA ENGINE
Every input is traceable. Every distribution is calibrated. Every forecast is defensible.
From data to distribution

This is what it looks like when real project data becomes a calibrated Monte Carlo input.

Three worked examples. Raw data from project records on the left. Fitted probability distribution on the right. This is what the Risk Data Engine produces.

Domain 2: Procurement

PO lead times to fitted Triangular

RAW PO DATA 340+ purchase orders 6wk 12wk 18wk FIT FITTED DISTRIBUTION Triangular (8, 11, 17) Min Mode Max 8 wk 11 wk 17 wk Real PO records determine the shape.
Domain 1: Productivity

Measured rates to fitted PERT

MEASURED RATES m2/day across 48 activities 12 24 36 m2/day FIT FITTED DISTRIBUTION PERT (14, 25, 34) 14 25 34 m2/day Mode P50 PERT weights toward the mode. Data picks the shape.
Domain 4: Performance

SPI variance to fitted Lognormal

SPI PERFORMANCE 18 months of schedule updates 1.0 M1 M9 M18 FIT FITTED DISTRIBUTION Lognormal (duration factor) 1.0x 1.15x 1.5x Duration multiplier right skew = upside risk tail SPI trend reveals the skew. Lognormal captures it.
Raw project data (histograms, scatter plots)
Fitted probability distribution (Monte Carlo input)

The distribution is not assumed. It is derived. That is the difference between an RDE-calibrated model and a workshop-based model.

The five data domains

Where defensible risk inputs actually come from.

Every Monte Carlo input in an IQRM model is traceable to one or more of these project data domains. Not to a workshop. Not to expert judgement. To records.

Domain 1

Productivity

Labour output rates from completed and in-progress activities. Measured vs planned. Activity-level data, not programme averages.

Timesheets, daily reports, progress records
Domain 2

Procurement

Purchase order lead times: planned vs actual. Vendor delivery performance. Cost variances on procured items.

PO registers, vendor tracking, invoices
Domain 3

Progress

Earned value curves. Physical completion percentages. Progress against baseline by discipline, area, and system.

EV reports, progress S-curves, WBS tracking
Domain 4

Performance

Schedule Performance Index (SPI) and Cost Performance Index (CPI) at activity and WBS levels. Trend analysis.

P6 schedule updates, cost reports, EVM
Domain 5

Resources

Equipment utilisation. Personnel availability and mobilisation lead times. Material supply constraints.

Resource histograms, equipment logs, HR records

Five domains. Real records. Traceable distributions. That is the difference between an opinion and an analysis.

What changes

Standard practice vs. an RDE-calibrated model.

Standard practice
  • Three-point estimates from a workshop
  • "Expert judgement" with no traceable source
  • Same distributions recycled across projects
  • Inputs derived in 2 days, model runs for 6 months
  • P80 that collapses under the first question
  • Risk register as input to Monte Carlo
  • Looks quantitative. Foundation is qualitative.
vs
After RDE deployment
  • Distributions calibrated from 5 project data domains
  • Every input traceable to a specific data source
  • Distributions fitted to this project's actual performance
  • Inputs earn the same rigour as the simulation
  • P80 that survives board-level challenge
  • Project data as input to Monte Carlo
  • Quantitative from input to output.
Deployment process

Five phases. Data to defensible forecast. 6-8 weeks.

Phase 1

Scope and data audit

Map the programme's data landscape. Identify usable data across the 5 domains. Define gaps. Agree deliverables.

Week 1
Phase 2

Data extraction

Extract raw data from project systems: P6, cost reports, PO registers, EV reports, resource logs. Structure for analysis.

Weeks 2-3
Phase 3

Statistical fitting

Analyse distributions. Fit probability distributions to each input based on data shape, not assumptions.

Weeks 3-4
Phase 4

Model rebuild

Rebuild the QSRA/QCRA in Safran Risk using calibrated distributions. Run Monte Carlo. Produce P50/P80/P90.

Weeks 4-6
Phase 5

Report and transfer

Board-ready report. Executive presentation. Model handover. Methodology documentation for your team.

Weeks 6-8
Case study

RDE deployment on a $1.2bn brownfield expansion.

GCC oil and gas operator · Brownfield expansion · $1.2bn programme
Before RDE

Two years of workshop-derived three-point estimates. Monthly risk updates with the same top 10 risks. P80 schedule contingency the executive team could not defend at the annual sanction review.

RDE deployment

8-week engagement. Productivity rates extracted from daily reports across 12 disciplines. Procurement lead times from 340+ purchase orders. Progress curves from EV reports. Distributions recalibrated in Safran Risk.

After RDE

Tighter, evidence-based forecast. Every P80 input traceable to source data. Re-baseline approved at the next executive review. RDE adopted as standard for two follow-on programmes.

18%
P80 contingency reduced
340+
Purchase orders analysed
2
Follow-on programmes adopted RDE
Go deeper or start a conversation

Download the RDE methodology paper. Or discuss a deployment on your programme.

The methodology paper is a detailed technical overview: the 5 data domains, the distribution fitting process, and a worked example from a real programme. Written for risk practitioners and programme directors.

  • The 5 data domains explained with source examples
  • Distribution fitting methodology and selection criteria
  • Worked example: procurement lead time calibration
  • How the RDE connects to QSRA, QCRA, and Risk Radar
  • When to commission an RDE deployment (4 triggers)

Download the methodology paper

PDF. Sent to your inbox in 60 seconds.
or
Discuss an RDE deployment directly →
No spam. Unsubscribe anytime. Privacy policy.

Check your inbox.

The RDE methodology paper is on its way. If you want to discuss a deployment, reply to the email or email us directly.

Frequently asked

Questions about the Risk Data Engine.

Is the RDE a piece of software?

No. The RDE is a methodology, not software. It is a structured process for extracting, analysing, and calibrating data from project systems into probability distributions that feed Monte Carlo models in Safran Risk. The methodology is proprietary to IQRM.

What if our project data is incomplete?

Most projects have more usable data than they realise. Phase 1 includes a data audit that maps what is available across the 5 domains. Where gaps exist, IQRM uses analogous data from similar projects and documents the basis explicitly. Maximum traceability with whatever data exists.

How long does a deployment take?

Typically 6-8 weeks. Phase 1 (scope and data audit) is 1 week. Phases 2-3 (extraction and calibration) take 2-4 weeks. Phases 4-5 (model rebuild and reporting) take 2-3 weeks.

Can our internal team learn the methodology?

Yes. The QRM Professional Programme teaches the RDE methodology as Module 5. For consulting clients, IQRM offers methodology transfer as part of the deployment so your risk team can maintain and update the model independently.

Is this applicable to early-stage projects?

Yes. Early-stage projects use analogous data from comparable completed projects. The RDE documents the analogous basis explicitly, so the executive team understands which inputs are from direct data and which are from comparable programmes. More defensible than unstated expert judgement.

How many engagements does IQRM take per month?

Maximum 3 consulting engagements per month. Every engagement is led by Rami Salem directly. Current availability is communicated during the scoping call.

Start a conversation

Your Monte Carlo model is only as defensible as its inputs. The Risk Data Engine makes the inputs defensible.

IQRM accepts 3 consulting engagements per month. If your programme's risk analysis needs an evidence base, not just a simulation, start the conversation.

Accepting RDE deployments for Q4 2026
Created with