Risk Management Processes: Plan, Identify, Analyze, and Monitor
PMBOK v8 Definition
Risk Management in PMBOK v8 encompasses the processes of planning risk management, identifying risks, performing risk analysis, planning risk responses, and monitoring risks. Plan Risk Management defines how to conduct risk management activities and should be completed early in the project. Identify Risks includes recognizing both negative and positive risks, focusing on distinguishing genuine risks from nonrisks such as concerns and issues. Not all risks can be identified at the outset due to inherent uncertainties and unknowns present at the beginning of a project. These processes belong to the Project Management Performance Domains, specifically the Uncertainty Performance Domain.
Why It Matters for the Exam
Risk management questions appear frequently on the PMI exam, typically in situational questions asking which process to perform next, what tool to use, or what output is produced. The exam tests your ability to distinguish between risk processes (planning, identification, analysis, response, monitoring) and to identify correct inputs, tools, techniques, and outputs for each. Questions often present scenarios where a project manager must decide whether to perform qualitative analysis, quantitative analysis, or risk response planning.
Key Points to Remember (for the exam)
- Plan Risk Management Inputs: Project charter, project management plan (all components), project documents (stakeholder register), enterprise environmental factors, organizational process assets
- Plan Risk Management Tools: Expert judgment, data gathering (interviews), data analysis (stakeholder analysis), meetings
- Plan Risk Management Output: Risk management plan (project management plan updates)
- Identify Risks Key Distinction: Focuses on distinguishing genuine risks from nonrisks (concerns and issues)
- Perform Risk Analysis Tools: Risk probability and impact assessment, simulations, sensitivity analysis, decision tree analysis, influence diagrams, probability and impact matrix
- Risk Categorization: A tool used during risk analysis to group risks by source or area
- Monitor Risks Outputs: Change requests, project document updates (issue log, lessons learned register, project team assignments, risk register, risk report)
- Monitor Risks Tools: Data analysis (technical performance analysis, reserve analysis), audits, meetings
Typical PMI Exam Example
A project manager is reviewing the risk register and notices several risks were identified as "high probability" but no response strategies were documented. The project is in the execution phase. According to PMBOK v8, what should the project manager do next? Answer: Perform risk response planning to allocate resources or include reserves and insert activities into project documents and the project management plan as needed.
PMI Exam Traps
- Trap: Confusing "Identify Risks" with "Perform Risk Analysis"
- Reality: Identify Risks focuses on recognizing risks (both threats and opportunities); Perform Risk Analysis evaluates probability, impact, and prioritization using tools like probability and impact matrix
- Trap: Thinking all risks can be identified at project start
- Reality: Not all risks can be identified at the outset due to inherent uncertainties and unknowns present at the beginning of a project
- Trap: Confusing "Risk Register" with "Risk Report"
- Reality: Risk register is the primary document for individual risks; risk report is a separate output for overall project risk information
- Trap: Assuming risk management is a one-time activity
- Reality: Risk response planning and monitoring should be performed throughout the project
Important PMI Connections
| Related Concept | Relationship Type | Exam Attention Point |
|---|---|---|
| Assumption Log | Input to Identify Risks and Perform Risk Analysis | Assumptions are sources of uncertainty that may become risks |
| Issue Log | Output of Monitor Risks | Issues are realized risks that have occurred and require management |
| Change Requests | Output of Monitor Risks | Risk responses may trigger change requests to the project management plan |
| Stakeholder Register | Input to Plan Risk Management | Stakeholder analysis helps identify risk attitudes and tolerances |
Quick Review Questions
- What are the three main tools and techniques used in Plan Risk Management?
- What is the key distinction between a genuine risk and a nonrisk (concern or issue)?
- Which risk analysis tool uses a probability and impact matrix?
- What outputs are produced by the Monitor Risks process?
- Why can't all risks be identified at the beginning of a project?
PMBOK v8 Reference
Section 2.7.2 - Risk Performance Domain (Figure 2-48: Plan Risk Management Inputs, Tools and Techniques, and Outputs; Figure 2-49: Identify Risks Inputs, Tools and Techniques, and Outputs; Figure 2-50: Perform Risk Analysis Inputs, Tools and Techniques, and Outputs; Monitor Risks Inputs, Tools and Techniques, and Outputs)