Risk Analysis Log: Key Inputs, Tools, and Outputs

PMBOK v8 Definition

The Risk Analysis Log is not a standalone document but is embedded within the Perform Quantitative Risk Analysis and Perform Qualitative Risk Analysis processes. These processes analyze individual project risks and overall project risk using data from the risk register, assumption log, and other project documents. The key outputs include updates to the risk register, risk report, assumption log, and issue log. This process belongs to the Planning Process Group and the Project Risk Management Knowledge Area.

Why It Matters for the Exam

The Risk Analysis Log concept appears frequently in PMI exam questions testing your ability to identify which documents are updated during risk analysis and which tools are applied. Questions often ask you to distinguish between inputs and outputs of risk analysis processes, or to select the correct tool for a specific risk assessment scenario. Expect situational questions where you must choose the appropriate data analysis technique.

Key Points to Remember (for the exam)

• Main Inputs: Risk register, assumption log, cost estimates, duration estimates, resource requirements, stakeholder register
• Main Outputs: Project document updates (risk register, risk report, assumption log, issue log)
• Key Tools: Expert judgment, data gathering (interviews), data analysis (risk probability and impact assessment, simulations, sensitivity analysis, decision tree analysis, influence diagrams), data representation (probability and impact matrix), risk categorization, facilitation
• Common Confusion: The assumption log is both an input AND an output of risk analysis—it is updated as assumptions are validated or invalidated
• Critical Output: The risk register is updated with prioritized risks, probability and impact ratings, and response strategies
• Supporting Documents: The risk report is updated with overall project risk exposure and risk breakdown structure details
• Enterprise Environmental Factors (EEFs) and Organizational Process Assets (OPAs) are also inputs to this process

Typical PMI Exam Example

A project manager is conducting qualitative risk analysis for a construction project. She has identified 20 risks in the risk register and needs to prioritize them based on probability and impact. Which tool should she use? Answer: Probability and impact matrix (data representation technique) combined with risk probability and impact assessment (data analysis technique).

PMI Exam Traps

• Trap: Confusing the assumption log as only an input to risk analysis
  • Reality: The assumption log is both an input AND an output—it is updated during risk analysis
• Trap: Thinking simulations are only for quantitative analysis
  • Reality: Simulations (e.g., Monte Carlo) are listed under data analysis tools for Perform Quantitative Risk Analysis
• Trap: Believing the risk register is the only output
  • Reality: The risk report, assumption log, and issue log are also updated as outputs
• Trap: Confusing risk categorization with risk probability and impact assessment
  • Reality: Risk categorization groups risks by source (e.g., technical, external), while probability and impact assessment evaluates likelihood and effect

Important PMI Connections

Quick Review Questions

1. Which three project documents are updated as outputs of Perform Risk Analysis?
2. What is the difference between risk categorization and risk probability and impact assessment?
3. Name two data analysis techniques used during Perform Quantitative Risk Analysis.
4. Why is the assumption log considered both an input and an output of this process?
5. Which tool would you use to evaluate the combined effect of multiple risks on project cost?

PMBOK v8 Reference

Section 2.7.2 – Perform Risk Analysis (Inputs, Tools and Techniques, and Outputs)