Risk management has to start early
One of the most common problems in office fit-out and refurbishment projects is that risk management starts too late. By the time a contractor is appointed, much of the project’s risk profile has already been created. The building may have been selected, the budget approved, the programme promised to the business and the brief developed beyond the assumptions used at feasibility stage.
At that point, the team can still manage risk, but it is often managing consequences rather than shaping outcomes. The better approach is to use risk management from the beginning as part of the client’s decision-making process. Before committing to a building, budget or procurement route, the team should be testing the assumptions that sit behind the business case.
For an occupier, that means understanding whether the chosen building can support the intended workplace brief without disproportionate cost or compromise. For an asset manager, it means understanding which refurbishment interventions will genuinely improve lettability rather than simply adding specification. For a developer, it means testing whether the proposed scope, programme and procurement route are aligned with the target market and risk appetite.
A risk register should change behaviour
Most project teams have seen risk registers that are technically complete but commercially unhelpful. They list the obvious risks, assign red, amber or green ratings, and then sit largely unchanged while the project moves forward. This gives the appearance of control without necessarily improving the outcome.
A useful risk register should help the client understand what might happen, how likely it is, what the cost or programme impact could be, who owns the risk, what action is required and whether the contingency allowance is sufficient. The important question is not whether a risk has been recorded. The important question is whether it has been converted into a decision.
If there is uncertainty around landlord works, has it been priced? If MEP capacity has not been validated, has an allowance been made and a survey instructed? If the brief is still moving, has the client accepted the cost and programme implications? If procurement is being compressed, has the impact on tender quality and contractor appetite been considered?
Risk management should create action. Otherwise it is just project administration.
Contingency should be linked to risk, not hope
One of the clearest signs of weak risk management is the use of a contingency percentage with very little understanding of what it is intended to cover. A percentage allowance may be necessary at early stages, but it should not become a substitute for proper risk analysis.
Contingency is not there to cover poor scope definition, uncontrolled client change or optimism in the base estimate. It should be linked to identified uncertainty within the project. A design development allowance is not the same as a construction contingency. A client change allowance is not the same as an inflation allowance. A landlord interface risk is not the same as a general market risk.
A good example from my own experience was the New Design Museum project. The contingency strategy was established years before completion, when the project still carried significant uncertainty. That uncertainty was not treated as a single undifferentiated pot of money. It was managed against the risks that existed at each stage of the project, including design development, procurement, construction complexity, stakeholder requirements and the normal unknowns that come with delivering a major cultural project.
As the project developed, the contingency position was reviewed and adjusted. Some risks increased, some reduced and others were retired as the design, procurement and delivery strategy became clearer. By the end of the project, the contingency had been managed so tightly that only around £10,000 remained. That final amount was used for client wish-list enhancements rather than to rescue the project from uncontrolled change or unresolved risk.
The lesson was not that the project was lucky. The lesson was that risk was actively managed, reviewed and controlled over time. That is how contingency should work. It should give the client confidence that known uncertainty has been considered properly, while also creating a mechanism for releasing money as risks are reduced.
Procurement strategy is part of risk management
Procurement is often treated as a separate workstream from risk management, but the two are closely connected. The procurement route determines when risk is priced, who is asked to carry it, how much information is available at tender and how much opportunity there is for contractor and supply chain input before commitment.
Single-stage tendering can work well when the brief is clear, the design is mature, surveys are complete and there is sufficient market appetite. However, single-stage tendering is not a cure for uncertainty. If the information is incomplete, the contractor will either price the risk, exclude the risk, miss the risk or seek to recover it later. None of those outcomes gives the client genuine cost certainty.
Two-stage procurement or a PCSA can be more appropriate where the project is technically complex, the programme is tight, the existing building carries uncertainty or early supply chain input would improve buildability, logistics, sequencing and package strategy. This is not because two-stage procurement is automatically better. It is because it can allow risk to be identified, tested and reduced before the final contract sum is agreed.
The procurement route should be selected by reference to the project’s risk profile, not because it is the route the organisation normally uses.
Existing buildings need proper risk thinking
Office refurbishment and fit-out projects often carry risks that are less visible than new-build construction. The base building may appear straightforward, but the real risk can sit in MEP capacity, landlord systems, risers, fire strategy, structure, asbestos, access, logistics, metering, controls, warranties, statutory approvals or the interface between Cat A and Cat B responsibilities.
These risks are often underestimated at feasibility stage because the client is focused on location, rent, programme and the workplace brief. Yet they can have a material impact on cost certainty. A project can have a good design and a sensible budget but still be exposed if the existing building assumptions have not been properly tested.
This is where early due diligence is critical. Surveys, landlord information, technical reviews, MEP capacity checks and interface schedules should not be seen as administrative tasks. They are part of cost management because they help determine whether the proposed scope is deliverable within the client’s budget and programme.
What clients should do differently
Clients do not need more complicated risk management. They need more useful risk management.
That means benchmarking the project and modelling abnormals before committing to a lease, budget or preferred option, and making sure the benchmark reflects the actual building, specification, programme, procurement route and risk profile. Appointing an independent cost consultant is fundamental to this process, as they will provide impartial advice.
It means validating the brief early, because the brief drives almost every significant cost decision. It means investigating the existing building properly, particularly where MEP capacity, landlord works, fire strategy, access, logistics or statutory constraints may affect the project.
It also means quantifying uncertainty rather than describing it in general terms, linking contingency to defined risks and choosing the procurement route based on the maturity of the design, the technical complexity of the project, the strength of the tender list and the level of early contractor input required. Change control also needs to be established before design momentum takes over, so that scope movement is visible, priced and approved before it becomes embedded in the project.
This is not about eliminating all risk. That is impossible. It is about making risk visible early enough for the client to make better decisions.
Conclusion
Risk management in construction should not be treated as a governance formality or a line in a monthly report. Done properly, it is one of the main tools for improving cost certainty.
In the current office fit-out market, this matters more than ever. Forecasts may look relatively stable, but project risk remains uneven. Prime space is scarce, existing buildings carry technical uncertainty, MEP packages remain sensitive, sustainability requirements are increasing and procurement routes need to be chosen with more care.
The clients who achieve better outcomes will not be the ones who avoid risk altogether. They will be the ones who identify it earlier, quantify it properly, allocate it clearly, procure it intelligently and control it throughout the project.
References
Is Risk Management Just a Box-Ticking Exercise?
The Psychology of Cost Certainty – EthosEQ
Copyright
© 2026 EthosEQ Ltd. All rights reserved.
This article has been prepared by EthosEQ for general information and thought leadership purposes only. It may be shared with attribution, but it should not be copied, reproduced, republished or distributed for commercial purposes without prior written consent from EthosEQ.
Disclaimer
This article is intended to provide general market commentary and practical insight into construction risk management, cost certainty and office fit-out procurement. It does not constitute professional advice, cost advice, legal advice, investment advice or a recommendation in relation to any specific project, procurement route, contract strategy or real estate decision.
