Guide

Project Risk Scoring vs RAG Status Reporting

Why RAG status hides project risk, and how to build a transparent 0–100 risk score from delivery signals, the way software delivery intelligence does.

Updated · All guides

The short answer

RAG status is an opinion: a project manager picks green, amber or red. A project risk score is a calculation: a number from 0 to 100 built from signals in the project data, such as overdue work, blocked work, team overload and schedule performance. Keep the familiar colours, but derive them from the score, and show the inputs behind every number so anyone can check why a project turned amber.

Why RAG status hides risk

The signals behind a risk score

Each signal is measured as a percentage from 0 to 100, so they can be combined. Most come straight from Jira:

SignalHow to measure it (0–100)
Overdue workOpen items past their due date ÷ open items. JQL: project = ABC AND statusCategory != Done AND duedate < now()
Blocked workBlocked items ÷ all items. JQL depends on your workflow, for example project = ABC AND (status = Blocked OR Flagged is not EMPTY)
Team overloadPeople allocated beyond their capacity, across all their projects ÷ people on the project
Schedule performanceHow far behind plan the work is. With earned value: (1 − SPI) × 100 when SPI is below 1
Cost performanceHow far over budget the work is: (1 − CPI) × 100 when CPI is below 1
Team activityShare of the team whose tracked activity has dropped, where activity is tracked

Schedule and cost performance need estimates and a baseline plan. When most work is unestimated, leave them out rather than guess. The other signals still give a useful score.

Build one in a spreadsheet

  1. Measure each signal as a percentage, as in the table above.
  2. Choose weights that add up to 100, reflecting what predicts trouble in your organisation.
  3. Calculate the score: multiply each signal by its weight, add them up and divide by 100.
  4. Set bands that map the score to colours, for example green below 40, amber 40–69, red 70 and above.
  5. Show the breakdown. List each signal's contribution next to the score, so the biggest driver is obvious.

Here is an example with illustrative weights for a project of five people:

SignalValueWeightContribution
Overdue work45 (9 of 20 open items)3013.5
Blocked work30257.5
Team overload60 (3 of 5 people)2515.0
Schedule performance40 (SPI 0.6)208.0
Risk score10044: amber

The colour alone says "amber". The breakdown says more: team overload is the biggest driver, so moving work or people will help more than chasing overdue tickets. That is the conversation RAG status never starts.

Making the score trusted

Common objections

How Exentras scores project risk

Exentras calculates a 0–100 risk score for every project from your Jira Cloud data and team allocation: team overload across the whole portfolio, blocked work, overdue work, schedule and cost performance, and team activity where it is tracked. Scores below 40 are green, 40–69 amber and 70 or above red, the same bands on every page and in the weekly executive brief.

Each score comes with a breakdown of every factor's value, weight and contribution, and the top bottlenecks are listed in order. When fewer than 40% of work items are estimated, schedule and cost performance are left out and the score is calculated from the remaining signals. The engines are rule-based and weights are set centrally, so a score means the same thing on every project. What is software delivery intelligence?

Frequently Asked Questions

What is a project risk score?

A number from 0 to 100 calculated from signals in the project data, such as overdue work, blocked work, team overload and schedule performance. Bands on the score map to green, amber and red, so the colours stay familiar but come from data instead of opinion.

Can a risk score and RAG status be used together?

Yes, and that is the easiest way to adopt one. Keep the green, amber and red colours executives know, derive them from the score, and let project managers add context next to it rather than overriding it.

Does a project risk score need story point estimates?

No. Overdue work, blocked work and team overload need no estimates. Schedule and cost performance do, so a good model leaves them out when estimates are missing instead of guessing. Exentras works this way.

Does risk scoring rate individual people?

It should not. Signals such as overload are counted at team and project level to show where work is stuck, not to rank people. Exentras scores projects and teams; it does not rank or label individuals.

See it on your own projects

Connect Jira Cloud read-only and get risk scores, delivery forecasts and a weekly executive brief. 14-day free trial, no card needed.

More guides