Project Risk Categorization Using RBS and WBS Structures

PMBOK v8 Definition

Risk categorization is the process of grouping individual project risks by sources of risk (e.g., using the Risk Breakdown Structure [RBS]), the area of the project affected (e.g., using the Work Breakdown Structure [WBS]), or other useful categories such as project phase, project budget, and roles and responsibilities. This categorization determines the areas of the project most exposed to the effects of uncertainty and can lead to developing more effective risk responses by focusing attention on the highest risk exposure areas.

Why It Matters for the Exam

Risk categorization appears frequently in PMI exam questions related to Risk Management, particularly in the Identify Risks and Plan Risk Responses processes. Questions often test your ability to distinguish between RBS (risk sources) and WBS (project areas affected) as categorization frameworks, and to recognize that categorization enables generic risk responses for groups of related risks.

Key Points to Remember (for the exam)

• Primary Categorization Tools: Risk Breakdown Structure (RBS) for sources of risk; Work Breakdown Structure (WBS) for areas of the project affected
• Purpose of Categorization: Determines areas most exposed to uncertainty; enables development of more effective risk responses
• Risk Categories Location: Defined in the Risk Management Plan
• Additional Categories: Project phase, project budget, roles and responsibilities, common root causes
• RBS Definition: A hierarchical representation of potential sources of risk (see Figure 4-5 in PMBOK v8)
• RBS Usage: Helps the project team consider the full range of sources from which individual project risks may arise
• Generic Response Benefit: Grouping risks by category allows developing generic risk responses to address groups of related risks

Typical PMI Exam Example

A project manager is facilitating a risk identification workshop. The team has identified 40 individual risks. To develop effective responses, the project manager groups risks by their source using the RBS. This reveals that 15 risks originate from "External" sources (regulatory changes, weather). The team develops a single generic response for all external risks rather than 15 separate responses.

PMI Exam Traps

• Trap: Confusing RBS (Risk Breakdown Structure) with WBS (Work Breakdown Structure)

  • Reality: RBS categorizes by sources of risk; WBS categorizes by project areas affected

• Trap: Thinking risk categories are created during risk identification

  • Reality: Risk categories are defined in the Risk Management Plan before identification begins

• Trap: Assuming all risks must have unique, individual responses

  • Reality: Categorization allows generic risk responses for groups of related risks

• Trap: Confusing risk categorization with risk probability and impact assessment

  • Reality: Categorization groups risks; probability/impact assessment evaluates each risk individually

Important PMI Connections

Quick Review Questions

1. What are the two primary structures used for risk categorization in PMBOK v8?

2. Where are risk categories that may be used for the project defined?

3. How does grouping risks into categories lead to more effective risk responses?

4. What is the RBS (Risk Breakdown Structure) and how does it help the project team?

5. Name three other useful categories (beyond RBS and WBS) for grouping project risks.

PMBOK v8 Reference

Section 4 – Inputs and Outputs (Risk Breakdown Structure, Figure 4-5) Section 5 – Tools and Techniques (Prompt List, Risk Categorization)