Exploit Risk Response: Assigning Top Resources and New Technologies
PMBOK v8 Definition
The Exploit response strategy is selected for high-priority opportunities where the organization wants to ensure that the opportunity is realized. This strategy seeks to capture the benefit associated with a particular opportunity by ensuring that it definitely happens, increasing the probability of occurrence to 100%. Examples of exploiting responses may include assigning an organization's most talented resources to the project to reduce the time to completion or using new technologies or technology upgrades to reduce cost and duration.
This concept belongs to the Perform Quantitative Risk Analysis and Plan Risk Responses processes within the Project Risk Management Knowledge Area.
Why It Matters for the Exam
The Exploit strategy appears frequently in PMI exam questions testing your ability to distinguish between positive risk (opportunity) response strategies. The exam tests whether you can identify when to use Exploit versus other opportunity strategies (Share, Enhance, Accept) and recognize specific examples of exploitation, such as assigning top talent or adopting new technologies. Questions typically present a scenario where a project has a high-priority opportunity, and you must select the appropriate response.
Key Points to Remember (for the exam)
- Definition: Exploit seeks to capture the benefit by ensuring the opportunity definitely happens, increasing probability to 100%
- When Used: Selected for high-priority opportunities where the organization wants to ensure realization
- Example 1: Assigning an organization's most talented resources to reduce time to completion
- Example 2: Using new technologies or technology upgrades to reduce cost and duration
- Distinction from Enhance: Exploit aims for 100% probability; Enhance increases probability or impact but not to certainty
- Overall Project Level: At the overall project level, exploit may include adding high-benefit scope elements or modifying risk thresholds with stakeholder agreement
- Escalation Note: Opportunities are usually escalated to the level matching affected objectives; escalated opportunities are not monitored further after escalation
Typical PMI Exam Example
Scenario: Your project has identified an opportunity to complete six months early using a new software platform. The organization wants to guarantee this benefit. What risk response strategy should you use?
Correct answer: Exploit, because the organization wants to ensure the opportunity definitely happens (100% probability) by using new technology upgrades to reduce duration.
PMI Exam Traps
-
Trap: Confusing Exploit with Enhance
-
Reality: Exploit increases probability to 100% (certainty); Enhance increases probability or impact but does not guarantee occurrence
-
Trap: Thinking Exploit only applies to individual risks
-
Reality: Exploit also applies at the overall project level when overall risk is significantly positive and outside agreed thresholds
-
Trap: Selecting Share when the organization wants to retain full benefit
-
Reality: Share transfers ownership to a third party; Exploit keeps ownership within the organization
-
Trap: Assuming escalated opportunities are still monitored by the project team
-
Reality: Escalated opportunities are not monitored further by the project team after escalation (though recorded in the risk register for information)
Important PMI Connections
| Related Concept | Relationship Type | Exam Attention Point |
|---|---|---|
| Share | Alternative opportunity strategy | Share transfers ownership to a third party who shares the benefit; Exploit keeps ownership |
| Enhance | Alternative opportunity strategy | Enhance increases probability/impact but not to 100%; Exploit ensures 100% occurrence |
| Escalate | Prior step for opportunities | Opportunities are escalated before Exploit is selected if they exceed project authority |
| Acquire Resources | Implementation enabler | Assigning top talent (Exploit example) links to Acquire Resources process; failure to acquire resources affects schedule, budget, quality, and increases risk |
Quick Review Questions
-
A project manager assigns the organization's most skilled engineers to a critical project phase to guarantee early completion. Which risk response strategy is being applied?
-
What is the key difference between the Exploit and Enhance strategies for opportunities?
-
When an opportunity is escalated to a higher organizational level, what is the project team's responsibility regarding monitoring?
-
At the overall project level, what two actions might an Exploit strategy include when overall project risk is significantly positive?
-
A vendor offers a new technology that could reduce project costs by 20%, but the organization wants to share this benefit with the vendor in exchange for implementation support. Which strategy should be selected?
PMBOK v8 Reference
Section 11.5.2.3 - "Plan Risk Responses: Tools and Techniques" (Threat and Opportunity Response Strategies)