Risk Classification in the Risk Performance Domain
PMBOK v8 Definition
Risk Classification is a tool and technique used within the Risk Performance Domain to organize individual project risks by categories such as sources, impact areas, or root causes. According to PMBOK v8, risk classification helps the project team understand the distribution of risks across the project and identify areas of greatest exposure. This process is part of the broader Risk Performance Domain, which encompasses all risk management activities from planning through monitoring.
Why It Matters for the Exam
The PMI exam frequently tests risk classification because it directly impacts how risks are identified, analyzed, and responded to across the project. Questions often appear in scenario-based items where you must determine the appropriate classification method or interpret a risk breakdown structure (RBS) to identify missing risk categories.
Key Points to Remember (for the exam)
- Primary Purpose: Risk classification organizes risks into categories (technical, external, organizational, project management) to improve analysis and response planning
- Common Classification Types: By risk source, by risk area (WBS element), by root cause, or by phase of the project lifecycle
- Risk Breakdown Structure (RBS): A hierarchical representation of potential risk sources, used as a classification framework
- Output of Identify Risks Process: The risk register contains classified risks with their assigned categories
- Input to Perform Risk Analysis: Classified risks enable more accurate probability and impact assessments by grouping similar risks
- Tool Used: Risk categorization techniques include brainstorming, checklists, and interviews
- Common Confusion: Risk classification is NOT the same as risk prioritization – classification organizes, prioritization ranks
Typical PMI Exam Example
A project manager is reviewing identified risks for a software development project. The team has listed 45 individual risks without any organization. The project manager asks the team to group risks by source (technology, resources, requirements, external vendors). This action represents which risk management activity? Answer: Risk classification using a Risk Breakdown Structure.
PMI Exam Traps
-
Trap: Confusing risk classification with risk probability and impact assessment
-
Reality: Classification organizes risks into categories; probability and impact assessment evaluates their potential effect
-
Trap: Believing risk classification is only done once at the beginning of the project
-
Reality: Risk classification is iterative and updated as new risks are identified throughout the project lifecycle
-
Trap: Thinking the Risk Breakdown Structure is the same as the Work Breakdown Structure
-
Reality: The RBS organizes risk sources; the WBS organizes project deliverables and work packages
-
Trap: Assuming all risks must fit into only one category
-
Reality: A single risk may be classified under multiple categories depending on its characteristics
Important PMI Connections
| Related Concept | Relationship Type | Exam Attention Point |
|---|---|---|
| Identify Risks (Figure 2-49) | Process containing risk classification | Classification occurs during risk identification, not during analysis |
| Perform Risk Analysis (Figure 2-50) | Input from classification | Classified risks enable more targeted quantitative and qualitative analysis |
| Plan Risk Responses (Figure 2-51) | Output to response planning | Similar risks in the same category may have common response strategies |
| Risk Register | Output document | The risk register must include risk categories for each identified risk |
Quick Review Questions
- During which risk management process is risk classification typically performed?
- What is the primary difference between a Risk Breakdown Structure and a Work Breakdown Structure?
- If a project has risks related to technology, external regulations, and team capabilities, which classification method would best organize these risks?
- Can a single risk be assigned to more than one classification category? Why or why not?
- How does risk classification support the Plan Risk Responses process (Figure 2-51)?
PMBOK v8 Reference
Section 2.6 - Risk Performance Domain Figure 2-46 - Risk Classification (Page 93) Figure 2-47 - Risk Performance Domain Processes Overview (Page 95) Figure 2-49 - Identify Risks Inputs, Tools and Techniques, and Outputs (Page 97)