Domain 2 Task 3: Assess and Manage Risks

Assess and Manage Risks

Introduction: Why This Matters

Every project carries uncertainty. Risks can derail schedules, inflate costs, reduce quality, or threaten business value. Effective project managers do not ignore risks. They anticipate them, analyze their probability and impact, and develop proactive strategies. On the PMP exam, risk scenarios show up often. The best answers emphasize proactive identification, prioritization, and structured response, not reactive firefighting.

Purpose and Objectives

Primary Purpose: Ensure risks are continuously identified, assessed, and managed so project outcomes are protected and opportunities are maximized.

Key Objectives:

  • Identify and categorize project risks systematically.
  • Perform qualitative and quantitative risk analysis.
  • Prioritize risks based on probability, impact, and urgency.
  • Develop and implement appropriate risk responses.
  • Monitor risks continuously and adapt responses as conditions change.

Overview

Risk management is a structured cycle: identify risks, analyze them, decide how to respond, then monitor and update continuously.

Characteristics

  • Proactive and continuous: Risks are revisited throughout the project, not just during planning.
  • Structured decision-making: Uses qualitative (ranking) and quantitative (numerical) analysis when appropriate.
  • Balanced: Covers both threats (negative risks) and opportunities (positive risks).
  • Documented and owned: Risks and responses are tracked in the risk register with clear owners and follow-up actions.

Practical Example

Context: A university project is launching a new online learning system.

Activities:

  • Identify: Vendor delivery delays (external), faculty resistance (organizational), data migration errors (technical).
  • Analyze and prioritize: Use probability and impact scoring to focus on the highest exposure items first.
  • Respond: Mitigate vendor delays with early milestones, share adoption risk with faculty champions, avoid migration errors using a pilot.
  • Monitor: Track triggers, new risks, and response effectiveness during recurring risk reviews.

Outcome: Risks are handled before they become incidents, disruption is reduced, and stakeholder confidence increases.

Common Pitfalls

Reactive Risk Behavior

  • Pitfall: Waiting until issues occur instead of identifying risks early.
  • Prevention: Run early risk identification workshops and keep risk reviews on the regular cadence.

Incomplete Risk Coverage

  • Pitfall: Focusing only on threats and ignoring opportunities.
  • Prevention: Include opportunity strategies (exploit, enhance, share, accept) during analysis and planning.

Outdated Documentation

  • Pitfall: Failing to update the risk register, leading to stale or irrelevant strategies.
  • Prevention: Assign risk owners and update the register after each review and major change.

Sensei Tip : When the exam gives you a “risk is identified” scenario, your best move is usually: document it, analyze it, plan a response, assign an owner, then monitor it. That is the disciplined path.

Exam Alert : If an option says to “escalate immediately” or “reassign work without analysis,” be cautious. The PMP usually expects you to follow the risk process first unless the scenario clearly describes an urgent active issue.

Exam Lens

Patterns on the PMP Exam:

  • The exam favors proactive, structured risk management over reactive problem solving.
  • Look for actions like identifying risks, analyzing probability and impact, selecting response strategies, and updating the risk register.
  • Be wary of choices that ignore risks, accept without analysis, or jump straight to escalation without following the process.

Sample Question

Question: During planning, the project team identifies a risk that a key vendor may fail to deliver on time. What should the project manager do?

  1. Ignore the risk since it has not occurred yet.
  2. Document the risk in the register and develop a mitigation strategy.
  3. Escalate immediately to the sponsor for resolution.
  4. Reassign deliverables to the internal team without analysis.

Correct Answer: B. Document the risk in the register and develop a mitigation strategy. The project manager records the risk and plans a structured response. Ignoring it, escalating prematurely, or reassigning without analysis breaks the disciplined risk process.

Quick Recap Table

Step Description Exam Watch Point
Identify Risks Gather threats and opportunities systematically. Document in the risk register.
Qualitative Analysis Prioritize using probability, impact, and urgency. Fast, common, and widely applicable.
Quantitative Analysis Measure overall exposure using numerical techniques. Used for critical or high-stakes risk decisions.
Response Strategies Threats: avoid, transfer, mitigate, accept. Opportunities: exploit, enhance, share, accept. Match strategy to risk type and context.
Monitor Risks Track triggers, new risks, and response effectiveness. Keep the risk register current.

Key Takeaways

  • Risk management is a continuous process, not a one-time task.
  • Both threats and opportunities require proactive strategies.
  • Qualitative analysis prioritizes. Quantitative analysis quantifies exposure when needed.
  • Responses must be documented, owned, integrated into the plan, and monitored.
  • PMP questions reward proactive, balanced, and documented risk practices.

Next Step

We will now move to Task 4: Engage Stakeholders, where you will learn how to involve stakeholders in risk-informed decision-making and maintain alignment throughout project execution.

Bibliography

Project Management Institute. (2021). A Guide to the Project Management Body of Knowledge (PMBOK® Guide) (7th ed.). Project Management Institute.

Scroll to Top