Project Risk Management: Strategies for Threats and Opportunities

Project Risk Management: Strategies for Threats and Opportunities

PMBOK v8 Definition

Project risk management encompasses the processes of conducting risk management planning, identification, analysis, response planning, and monitoring project risks. It includes developing strategies for opportunities (pages 157–158, 202), strategies for threats (pages 203–204), and strategies for overall project risk (page 203). Risk response strategies are applied to both individual project risks and overall project risk to increase the probability of project success.

Why It Matters for the Exam

Risk management is a high-weight domain on the PMI exam, appearing in approximately 15–20% of questions. Expect scenario-based questions asking you to select the correct risk response strategy for a given situation, distinguish between individual risk and overall project risk, and apply strategies for opportunities versus threats. Questions frequently test your ability to match the right strategy to the right risk type.

Key Points to Remember (for the exam)

  • Risk Response Strategies for Threats (pages 203–204): Escalate, Avoid, Transfer, Mitigate, Accept
  • Risk Response Strategies for Opportunities (pages 157–158, 202): Escalate, Exploit, Share, Enhance, Accept
  • Overall Project Risk Strategies (page 203): Avoid, Exploit, Transfer/Mitigate/Share, Enhance, Accept
  • Key Distinction: Individual risks are specific uncertain events; overall project risk is the effect of uncertainty on the project as a whole
  • Common Confusion: "Transfer" is for threats only (e.g., insurance, warranties); "Share" is for opportunities only (e.g., joint ventures, partnerships)
  • Risk Appetite vs. Risk Threshold: Risk appetite is the degree of uncertainty an organization is willing to accept; risk threshold is the specific level of exposure at which a response is triggered
  • Risk Register: Primary output of risk identification, containing identified risks, potential responses, and root causes

Typical PMI Exam Example

Your project has identified a potential opportunity to secure additional funding through a government grant. The organization lacks expertise in grant applications. Which is the BEST risk response strategy? Answer: Share – partnering with an organization experienced in grant writing to capture the opportunity together.

PMI Exam Traps

  • Trap: Confusing "Mitigate" with "Transfer"

  • Reality: Mitigate reduces probability/impact; Transfer shifts liability to a third party (insurance, fixed-price contracts)

  • Trap: Applying "Exploit" to threats

  • Reality: Exploit is ONLY for opportunities (seeking to realize the positive outcome); threats use Avoid, Mitigate, Transfer, or Accept

  • Trap: Confusing "Overall Project Risk" with "Individual Risks"

  • Reality: Overall project risk is the aggregate exposure; individual risks are specific uncertain events. Different strategies apply to each (page 203)

  • Trap: Thinking "Accept" means ignoring the risk

  • Reality: Active acceptance involves a contingency plan; passive acceptance involves no action other than documenting the risk

Important PMI Connections

Related ConceptRelationship TypeExam Attention Point
Procurement Strategies (pages 66, 247–248)Risk response toolFixed-price contracts transfer risk to seller; cost-reimbursable contracts retain risk with buyer
Change Control Board (CCB)Risk governanceCCB approves risk response plans that require budget/schedule changes; also called Steering Committee
Storming (team development phase, page 211)Risk contextTeam conflict during Storming increases project risk; effective leadership reduces this risk
SWOT Analysis (page 204)Risk identification toolStrengths/Weaknesses (internal), Opportunities/Threats (external) – directly feeds risk response strategies

Quick Review Questions

  1. Your project faces a threat of supplier bankruptcy. Which risk response strategy transfers this risk to a third party?

  2. A new regulation creates a market opportunity for your project's deliverables. Your team has the expertise to capture this opportunity alone. Which strategy should you use?

  3. What is the difference between "Avoid" for threats and "Exploit" for opportunities in overall project risk strategies?

  4. During which team development phase is project risk typically highest, and why?

  5. A project has identified 23 individual risks with varying probabilities and impacts. Is this the same as overall project risk? Why or why not?

PMBOK v8 Reference

Section 11.0 – Project Risk Management (pages 94, 134, 157–158, 202–204) Risk response strategies for threats: pages 203–204 Risk response strategies for opportunities: pages 157–158, 202 Overall project risk strategies: page 203 Procurement risk strategies: pages 66, 247–248 SWOT analysis: page 204 Team development phases (Storming): page 211