What is Program Risk Thresholds?
Program risk thresholds are the quantified limits that define which risks belong at which level: below the line, component teams manage their own; above it, the risk escalates to program governance. They translate the organization's risk appetite into working numbers — schedule days, cost exposure, benefit impact.
They also aggregate: ten component risks individually below threshold can sum to a program exposure far above it. Watching that accumulation is program risk management's distinctive job.
Worked example
A banking-integration program sets thresholds: any risk >$2M exposure, >30 days on the critical path, or touching regulatory commitments escalates to the program board. Each of five components carries a $1M data-migration risk — under threshold individually. The program risk register adds them, sees $5M riding one shared migration vendor, and escalates what no component would have.