Risk Management RBS: Decomposing Project Risk Sources
PMBOK v8 Definition
The Risk Breakdown Structure (RBS) is a hierarchical representation of potential sources of project risk, organized by category and subcategory. It is a tool used in the Plan Risk Management process, which is part of the Risk performance domain. The RBS helps the project team identify, analyze, and manage risks by systematically decomposing risk sources from Level 0 ("All Sources of Project Risk") into Level 1 categories (Technical, Management, Commercial, External) and further into Level 2 subcategories.
Why It Matters for the Exam
The RBS appears frequently in PMI exam questions testing your ability to categorize risks correctly and to distinguish it from the Work Breakdown Structure (WBS) . Questions often present a risk scenario and ask which RBS category it belongs to, or test your understanding that the RBS is an input to risk identification processes.
Key Points to Remember (for the exam)
- RBS Level 0: "All Sources of Project Risk" (the root)
- RBS Level 1 Categories (4 tested categories):
- 1. Technical Risk: Scope definition, requirements definition, estimates/assumptions/constraints, technical processes, technology, technical interfaces
- 2. Management Risk: Project management, program/portfolio management, operations management, organization, resourcing, communication
- 3. Commercial Risk: Contractual terms/conditions, internal procurement, suppliers/vendors, subcontracts, client/customer stability, partnerships/joint ventures
- 4. External Risk: Legislation, exchange rates (and other external factors)
- Main Output: The RBS is documented in the Risk Management Plan (a component of the project management plan)
- Common Confusion: Do NOT confuse RBS (risk sources) with WBS (work deliverables). The RBS decomposes where risks come from, not what work needs to be done.
- Key Exam Tip: When a question describes a risk related to "poorly defined requirements," it belongs to Technical Risk (1.2 Requirements definition) . When it describes "supplier delivery delays," it belongs to Commercial Risk (3.3 Suppliers and vendors) .
Typical PMI Exam Example
Scenario: A project manager is identifying risks for a construction project. One risk identified is "potential changes in environmental legislation during project execution." Which RBS Level 1 category does this risk belong to?
Answer: External Risk (4.1 Legislation) . The examiner is testing your ability to differentiate between Technical, Management, Commercial, and External risk sources.
PMI Exam Traps
-
Trap: Confusing Technical Risk (1.3 Estimates, assumptions, and constraints) with Management Risk (2.1 Project management)
- Reality: Estimates about the technical work (e.g., "we assumed the software will compile in 2 hours") → Technical Risk. Estimates about project management activities (e.g., "we assumed the status meeting will take 30 minutes") → Management Risk.
-
Trap: Thinking "Suppliers and vendors" belongs to External Risk
- Reality: It belongs to Commercial Risk (3.3 Suppliers and vendors) . External Risk is for factors outside the organization's control (legislation, exchange rates, etc.).
-
Trap: Assuming the RBS is created during Identify Risks process
- Reality: The RBS is created during Plan Risk Management (the first risk process), as a tool to guide subsequent risk identification.
-
Trap: Confusing the RBS with the Risk Register
- Reality: The RBS is a classification structure (hierarchy of risk categories). The Risk Register is a document listing individual risks with their details.
Important PMI Connections
| Related Concept | Relationship Type | Exam Attention Point |
|---|---|---|
| Risk Management Plan | Contains the RBS | The RBS is documented within the Risk Management Plan, not as a separate document |
| Work Breakdown Structure (WBS) | Complementary tool | WBS decomposes work; RBS decomposes risk sources. Both are hierarchical structures but serve different purposes |
| Identify Risks Process | Uses RBS as input | The RBS guides systematic risk identification by prompting the team to consider each category |
| Risk Register | Output of Identify Risks | The RBS helps populate the risk register; individual risks are tagged with their RBS category |
Quick Review Questions
-
A project team identifies a risk that "key subcontractor may declare bankruptcy." Under which RBS Level 1 category should this risk be classified?
-
During which process is the Risk Breakdown Structure (RBS) created?
-
What is the difference between the RBS and the WBS in terms of what they decompose?
-
A risk related to "poor communication between project team members" belongs to which RBS Level 1 and Level 2 categories?
-
True or False: The RBS is a component of the Risk Register.
PMBOK v8 Reference
Section 2.4.2.1 – Plan Risk Management (Risk performance domain)
Risk Breakdown Structure (RBS) is described as a tool used in risk management planning, with Level 0 = "All Sources of Project Risk" and Level 1 categories: Technical Risk, Management Risk, Commercial Risk, External Risk.