2.7.2 Processes: Risk Management Planning to Risk Reviews

2.7.2 Processes: Risk Management Planning to Risk Reviews

PMBOK v8 Definition

The Risk performance domain includes the processes required to conduct risk management planning, identification, analysis, response planning, response implementation, and risk reviews on a project. This domain represents a comprehensive approach to creating project resilience by managing risk through risk management practices, emphasizing the project team’s ability to anticipate, prepare for, respond to, and adapt to various risks and disruptions.

Note: This is a Performance Domain (not a Process Group or Knowledge Area). It spans the entire project lifecycle.

Why It Matters for the Exam

The PMI exam frequently tests your understanding of the complete risk management process sequence and which outputs feed into subsequent processes. Questions often present a scenario where you must identify the correct next step in the risk management workflow, or distinguish between the different types of risk analysis. Expect situational questions asking what to do after identifying risks or how to implement responses.

Key Points to Remember (for the exam)

  • Process Sequence (MEMORIZE THIS ORDER):

    1. Plan Risk Management
    2. Identify Risks
    3. Perform Risk Analysis
    4. Plan Risk Responses
    5. Implement Risk Responses
    6. Monitor Risks

  • Plan Risk Management: Defines how to conduct risk management activities. Begins when project is conceived, completed early in the project.

  • Identify Risks Output: Produces the risk report containing sources of overall project risk and summary information on individual project risks (threats and opportunities, distribution across categories, metrics and trends).

  • Implement Risk Responses: Executing risk plans to address project risks, minimize threats, and maximize opportunities. This is a separate process from planning responses.

  • Monitor Risks: Tracking and analyzing risks, implementing response plans, and evaluating their effectiveness throughout the project.

  • Key Distinction: Uncertainty ≠ Risk. Ambiguous situations do not always escalate into risks; they can be resolved through collaborative problem-solving as more information becomes available.

  • Risk Report Contents: Sources of overall project risk (most important drivers), number of identified threats and opportunities, distribution across risk categories, metrics and trends.

Typical PMI Exam Example

During project execution, the project manager identifies a new risk that could delay the critical path. After documenting the risk in the risk register, what should the project manager do NEXT?

Answer: Perform risk analysis (qualitative and/or quantitative) before planning responses. The sequence requires analysis BEFORE response planning.

PMI Exam Traps

  • Trap: Confusing "Plan Risk Management" with "Plan Risk Responses"

    • Reality: Plan Risk Management defines how to do risk management (methodology, roles, budget). Plan Risk Responses develops specific actions for individual risks.

  • Trap: Thinking Implement Risk Responses is part of Plan Risk Responses

    • Reality: They are two separate processes. Planning decides what to do; Implementing executes those plans.

  • Trap: Assuming all uncertainty becomes risk

    • Reality: Uncertainty includes factors completely outside existing knowledge. These can be resolved through collaborative problem-solving without becoming risks.

  • Trap: Confusing the risk report with the risk register

    • Reality: The risk report contains summary information and overall project risk sources. The risk register contains detailed individual risk entries.

Important PMI Connections

Related ConceptRelationship TypeExam Attention Point
Resources Performance DomainComplementaryResource procurement management includes efficiency checks that feed into risk identification
Schedule BaselineInput to Monitor RisksSchedule baseline is used to track risk impacts on project timeline
Perform Risk AnalysisPrecedes Plan Risk ResponsesAnalysis must be completed before response planning can begin
Identify RisksProduces Risk ReportRisk report contains sources of overall project risk and individual risk summaries

Quick Review Questions

  1. What is the correct sequence of risk management processes according to PMBOK v8?

  2. When should Plan Risk Management begin in the project?

  3. What information is included in the risk report after completing the Identify Risks process?

  4. What is the difference between Plan Risk Responses and Implement Risk Responses?

  5. Can ambiguous situations always be classified as project risks? Why or why not?

PMBOK v8 Reference

Section 2.7 - Risk Performance Domain Section 2.7.2 - Processes Section 2.7.2.1 - Plan Risk Management