Additional Data Recorded for Each Identified Risk

PMBOK v8 Definition

The risk register is a repository in which outputs of risk management processes are recorded, capturing details of identified individual project risks. Additional data may be recorded for each identified risk, depending on the risk register format specified in the risk management plan. This process belongs to the Planning Process Group and the Project Risk Management Knowledge Area.

Why It Matters for the Exam

The PMI exam frequently tests your ability to distinguish what data belongs in the risk register versus other project documents. Questions often present scenarios asking which information should be recorded during the Identify Risks process, and examiners specifically test whether you know the optional data fields beyond the basic list of identified risks.

Key Points to Remember (for the exam)

• Main Input: Risk management plan (specifies risk register format)
• Main Output: Risk register (updated during Identify Risks, Perform Risk Analysis, Plan Risk Responses, Implement Risk Responses, and Monitor Risks)
• Mandatory Content: List of identified risks (each with unique identifier), potential risk owners, list of potential risk responses
• Optional Additional Data: Short risk title, risk category, current risk status, one or more causes, one or more effects on objectives, risk triggers, WBS reference of affected activities, timing information
• Risk Triggers Definition: Events or conditions that indicate that a risk is about to occur
• Timing Information Includes: When a risk was identified, when a risk might occur, when a risk may no longer be relevant, and the deadline for taking action
• Common Confusion: The risk register is updated by FIVE processes, not just Identify Risks

Typical PMI Exam Example

During the Identify Risks process for a construction project, the project manager records the risk "Possible delay in steel delivery." The risk register includes the risk trigger "Supplier's factory inspection scheduled for next month" and the WBS reference for "Foundation Works." The risk owner is tentatively assigned as the Procurement Manager. These additional data fields are optional depending on the risk register format specified in the risk management plan.

PMI Exam Traps

• Trap: Confusing the risk register with the risk report

• Reality: The risk register contains detailed individual risk data; the risk report summarizes overall project risk exposure

• Trap: Thinking all risk register fields are mandatory

• Reality: Only the list of identified risks, potential risk owners, and potential risk responses are mandatory; additional data depends on the risk management plan

• Trap: Assuming risk triggers are the same as risk causes

• Reality: Risk triggers are events/conditions indicating a risk is about to occur; causes are the underlying sources of the risk

• Trap: Believing the risk register is only updated during Identify Risks

• Reality: The risk register is updated during all five risk management processes (Identify Risks, Perform Risk Analysis, Plan Risk Responses, Implement Risk Responses, Monitor Risks)

Important PMI Connections

Quick Review Questions

1. During which five processes is the risk register updated?

2. What is the difference between a risk trigger and a risk cause?

3. Which document specifies the format and additional data fields for the risk register?

4. Name three types of timing information that can be recorded for each identified risk.

5. What are the three mandatory items that must be recorded in the risk register during Identify Risks?

PMBOK v8 Reference

Section 11.2 - Identify Risks (Risk Register content and additional data fields)