Report Project Processes: Risk Report Development and Management

PMBOK v8 Definition

The Risk report is a project document that presents information on sources of overall project risk, together with summary information on identified individual project risks. It is developed progressively throughout the risk processes and may include the results of the following processes as these processes are completed: Perform Risk Analysis, Plan Risk Responses, Implement Risk Responses, and Monitor Risks. This output belongs to the Risk Management knowledge area and is produced across multiple Risk Management processes.

Why It Matters for the Exam

The Risk report appears frequently on the PMI exam because it is a progressive document that evolves throughout the project lifecycle, making it easy to test candidates on what information appears at each stage. Questions typically appear in situational scenarios where you must determine which risk document contains specific information or when the Risk report should be updated.

Key Points to Remember (for the exam)

• Main Output: Risk report (produced from multiple risk processes)
• Progressive Development: The Risk report is built gradually through: Perform Risk Analysis → Plan Risk Responses → Implement Risk Responses → Monitor Risks
• Two Content Categories: Contains information on (1) sources of overall project risk AND (2) summary information on identified individual project risks
• Key Input to Identify Risks: The Risk report serves as an input to the Identify Risks process
• Common Confusion: The Risk report is NOT the same as the Risk register. The Risk register contains detailed individual risks; the Risk report contains summary information and overall project risk sources
• Relationship to Risk Management Plan: The Risk management plan (an output of Plan Risk Management) guides HOW risks will be managed; the Risk report documents WHAT was found and done

Typical PMI Exam Example

A project manager is completing the Plan Risk Responses process and needs to document the agreed-upon response strategies for both individual project risks and overall project risk. Which document should the project manager update? Answer: The Risk report (which progressively incorporates results from Plan Risk Responses, among other processes).

PMI Exam Traps

• Trap: Confusing the Risk report with the Risk register Reality: The Risk register tracks individual risks with detailed information; the Risk report provides summary information on individual risks AND sources of overall project risk

• Trap: Thinking the Risk report is created only once Reality: The Risk report is developed progressively throughout the risk processes, with updates after Perform Risk Analysis, Plan Risk Responses, Implement Risk Responses, and Monitor Risks

• Trap: Believing the Risk report is only an output Reality: The Risk report is also an input to the Identify Risks process, creating a feedback loop in risk management

• Trap: Assuming the Risk report contains all risk details Reality: The Risk report contains summary information; detailed individual risk information remains in the Risk register

Important PMI Connections

Quick Review Questions

1. A project manager has completed Perform Risk Analysis. What should the project manager update with the results of this process?

2. Which document contains summary information on identified individual project risks AND sources of overall project risk?

3. During which processes is the Risk report progressively developed? (List all four)

4. A stakeholder asks to see the detailed risk analysis for a specific individual risk. Should the project manager provide the Risk report or the Risk register?

5. The Risk report serves as an input to which risk management process?

PMBOK v8 Reference

Section 2 – Project Management Performance Domains, Risk Performance Domain, pages 95-98 and 137-138 (Risk report definition and outputs of Perform Risk Analysis, Plan Risk Management, and Identify Risks processes)