Risk Breakdown Structure: Categorizing Project Risk Sources

PMBOK v8 Definition

The risk breakdown structure (RBS) is a hierarchical representation of potential sources of risk, providing a means for grouping individual project risks into categories. It helps the project team consider the full range of sources from which individual project risks may arise, and is defined in the risk management plan. Risk categories can also be organized by the area of the project affected (e.g., using the WBS), project phase, project budget, roles and responsibilities, or common root causes.

Why It Matters for the Exam

The RBS appears frequently in PMI exam questions about risk identification and risk categorization. You will see it tested in scenario-based questions asking which tool to use for grouping risks by source, and in questions about the risk management plan content. The exam also tests your ability to distinguish the RBS from the WBS and other hierarchical structures.

Key Points to Remember (for the exam)

• Primary Purpose: Groups individual project risks into categories to identify areas most exposed to uncertainty and to develop more effective risk responses
• Main Input to: Identify Risks process (Risk Management Knowledge Area, Planning Process Group)
• Key Output Location: Defined in the Risk Management Plan
• Hierarchy Type: Hierarchical representation of potential sources of risk (not deliverables)
• Common Confusion: RBS categorizes risk sources; WBS categorizes project deliverables and scope
• Flexibility: Organizations may have a generic RBS for all projects, multiple RBS frameworks for different project types, or a tailored RBS for a specific project
• Alternative: If RBS is not used, organizations may use a custom risk categorization framework (simple list or structure based on project objectives)

Typical PMI Exam Example

A project manager is leading a construction project and needs to ensure all potential risk sources are considered during risk identification. The organization has a standard hierarchical framework that groups risks by categories such as technical, external, organizational, and project management. What tool is the project manager using?

Answer: Risk Breakdown Structure (RBS)

PMI Exam Traps

• Trap: Confusing RBS with WBS

• Reality: RBS categorizes risk sources (technical, external, organizational); WBS categorizes project deliverables and scope (work packages)

• Trap: Thinking RBS is only for threats

• Reality: RBS categorizes both threats and opportunities—all individual project risks

• Trap: Assuming RBS is created during Identify Risks

• Reality: RBS is defined in the Risk Management Plan (Planning Process Group), which is created before Identify Risks

• Trap: Believing RBS is mandatory for all projects

• Reality: Organizations may use a custom risk categorization framework instead of an RBS

Important PMI Connections

Quick Review Questions

1. In which project management document is the risk breakdown structure defined?

2. A project team is categorizing identified risks by their source—technical, external, organizational, and project management. What hierarchical tool are they using?

3. What is the key difference between a Risk Breakdown Structure (RBS) and a Work Breakdown Structure (WBS)?

4. An organization does not use an RBS for its projects. What alternative can be used to categorize risks?

5. How does grouping risks into categories using the RBS help in developing risk responses?

PMBOK v8 Reference

Section 4 – Inputs and Outputs (Risk Management Plan content); Section 4.5 – Risk Breakdown Structure (RBS) example and description; Identify Risks Process inputs