The basic idea behind RAMP is extremely simple. It can be illustrated by considering the steps you take when considering going for a country walk with your family when on holiday. First you and your family identify the risks such as being caught in a thunderstorm, encountering a muddy path or getting lost You then analyse the likelihood of each such event and how serious the consequences might be, for example ruined clothing or getting back too late to go to the show for which you have tickets.

The next step is to identify the risk mitigation options, such as carrying umbrellas and rainwear, wearing boots, taking a map and compass, or taking a mobile phone to call a taxi if necessary. In each case there will be an inconvenience or cost factor and a decision will have to be made on whether mitigation is worthwhile.

Unless all the risks are mitigated, some residual risks will remain. Suppose it is decided not to take rainwear. The residual storm risk will then have to be controlled by keeping an eye on the sky and heading for shelter in time if black clouds roll up. The time risk will likewise have to be controlled by occasionally looking at a watch so that the taxi can be called when necessary.

These concepts of identification, analysis, mitigation, and control of the residual risks lie at the heart of the RAMP process. For a major project the situation is much more complicated than a country walk, with far more risks. Some of the risks will be dependent on others and many of the probabilities, costs and outcomes will be uncertain.