Overall Project Risk: Strategies and Management in

Overall Project Risk: Strategies and Management in

PMBOK v8 Definition

Overall project risk represents the effect of uncertainty on the project as a whole, arising from the combination of individual project risks and other sources of uncertainty. According to PMBOK v8, risk responses should be planned and implemented not only for individual project risks but also to address overall project risk. The same risk response strategies used for individual project risks (Avoid, Transfer, Mitigate, Accept, Enhance, Exploit, Share) can also be applied to overall project risk management.

Why It Matters for the Exam

Overall project risk appears frequently in PMI exam questions testing your understanding of the distinction between individual risks and aggregate project-level uncertainty. Questions often present scenarios where you must select the appropriate strategy for managing risk at the project portfolio level rather than for specific events, and they test whether you recognize that overall project risk requires its own dedicated response planning.

Key Points to Remember (for the exam)

  • Distinction from Individual Risks: Overall project risk is NOT the sum of individual risks—it represents the total uncertainty affecting the entire project outcome, including interactions between risks.

  • Same Strategies Apply: The seven risk response strategies (Avoid, Transfer, Mitigate, Accept, Enhance, Exploit, Share) apply equally to overall project risk as they do to individual project risks.

  • Avoid Strategy Trigger: When overall project risk is "significantly negative and outside the agreed-upon risk thresholds for the project," an Avoid strategy may be adopted—this is a critical exam point.

  • Risk Report Integration: The risk report presents information on sources of overall project risk, together with summary information on identified individual project risks, and is developed progressively throughout all risk processes.

  • Progressive Development: The risk report is built across multiple processes: Perform Risk Analysis, Plan Risk Responses, Implement Risk Responses, and Monitor Risks.

  • Periodic Review Requirement: Overall project risk requires periodic review to ensure that the risk exposure does not change significantly over time.

  • Performance Domain Context: Overall project risk management is part of the Risk performance domain, which aims to increase probability and impact of positive risks while decreasing probability and impact of negative risks.

Typical PMI Exam Example

A project manager is assessing a large infrastructure project with multiple interdependent work packages. The combined effect of schedule delays, budget constraints, and regulatory changes creates an overall risk level that exceeds the organization's risk threshold. The sponsor asks what strategy should be applied. Answer: Apply the Avoid strategy, as the overall project risk is significantly negative and exceeds agreed-upon thresholds.

PMI Exam Traps

  • Trap: Confusing overall project risk with the aggregate of individual risks Reality: Overall project risk includes interactions and combinations, not just summation

  • Trap: Thinking different strategies are needed for overall project risk Reality: The SAME seven strategies apply to both individual and overall project risk

  • Trap: Believing the risk report is created only once Reality: The risk report is developed progressively across multiple risk processes

  • Trap: Applying Accept strategy when thresholds are exceeded Reality: When overall risk exceeds thresholds and is significantly negative, Avoid is the correct strategy

Important PMI Connections

Related ConceptRelationship TypeExam Attention Point
Risk ReportOutput of risk processesPresents sources of overall project risk
Risk ThresholdsDecision criteriaDetermines when Avoid strategy is needed
Individual Project RisksComponent of overall riskBoth use same response strategies
Risk Performance DomainManagement frameworkContains all risk processes including overall risk management

Quick Review Questions

  1. What document presents information on sources of overall project risk together with summary information on individual project risks?

  2. When should the Avoid strategy be applied to overall project risk?

  3. How is the risk report developed throughout the project lifecycle?

  4. What is the key difference between overall project risk and individual project risks?

  5. Which performance domain includes the processes for managing overall project risk?

PMBOK v8 Reference

Section 2 - Project Management Performance Domains, Risk Performance Domain (pages 94-98, 134-137)