Risk Threshold: The Measure of Acceptable Variation Around an Objective
PMBOK v8 Definition
Risk threshold is the measure of acceptable variation around an objective that reflects the risk appetite of the organization and stakeholders. It quantifies how much deviation from a target the organization is willing to tolerate. For example, a risk threshold of ±5% around a cost objective reflects a lower risk appetite than a risk threshold of ±10%. This concept is part of the Project Risk Management Knowledge Area and is closely linked to risk appetite and risk exposure.
Why It Matters for the Exam
The PMI exam frequently tests risk threshold because it is the quantitative expression of the organization's risk appetite—a distinction that candidates often confuse. Expect questions that ask you to differentiate risk threshold from risk appetite, risk tolerance, and risk exposure. These appear in situational questions where the project manager must determine whether a risk response is needed based on whether the potential variation exceeds the established threshold.
Key Points to Remember (for the exam)
- Definition Link: Risk threshold = "measure of acceptable variation around an objective" that reflects risk appetite.
- Quantitative Nature: Risk threshold is always expressed in measurable terms (e.g., ±5%, ±10%, or specific dollar amounts).
- Risk Appetite Relationship: Risk appetite is the general willingness to accept risk; risk threshold is the specific quantified boundary of that willingness.
- Decision Trigger: When risk exposure exceeds the risk threshold, the organization must take action (implement risk responses).
- Stakeholder Influence: Risk thresholds reflect both organizational and stakeholder risk appetite (internal and external).
- Common Confusion: Do NOT confuse risk threshold with risk tolerance—tolerance is the level of acceptable deviation for a single stakeholder, while threshold is the organizational measure.
- Application Scope: Applies to any objective—cost, schedule, scope, quality, or performance.
Typical PMI Exam Example
A project has a cost objective of $500,000. The organization sets a risk threshold of ±5% for cost variation. During monitoring, the project manager identifies a potential cost overrun of $30,000 (6% above target). Question: What should the project manager do first? Answer: The risk exposure exceeds the risk threshold, so the project manager must implement risk responses or escalate the issue.
PMI Exam Traps
-
Trap: Confusing risk threshold with risk appetite
-
Reality: Risk appetite is the general willingness to accept risk; risk threshold is the specific quantified measure of acceptable variation around an objective.
-
Trap: Thinking risk threshold applies only to threats
-
Reality: Risk threshold applies to both threats and opportunities—any variation around an objective.
-
Trap: Assuming risk threshold is fixed for the entire project
-
Reality: Risk thresholds can vary by objective (cost vs. schedule) and may be reassessed during risk reviews.
-
Trap: Confusing risk threshold with risk exposure
-
Reality: Risk threshold is the acceptable limit; risk exposure is the aggregate measure of potential impact of all risks at a given point in time.
Important PMI Connections
| Related Concept | Relationship Type | Exam Attention Point |
|---|---|---|
| Risk Appetite | Defines / Quantifies | Risk appetite is the general willingness; risk threshold is the quantified measure of that willingness. |
| Risk Exposure | Comparison / Decision | Compare risk exposure against risk threshold to decide if action is needed. |
| Risk Response | Trigger / Input | When risk exposure exceeds risk threshold, implement risk responses (avoid, transfer, mitigate, etc.). |
| Risk Review | Reassessment | During risk reviews, reassess whether risk thresholds remain appropriate for current conditions. |
Quick Review Questions
-
A project has a schedule objective of 12 months with a risk threshold of ±10%. The current risk exposure shows a potential delay of 15%. What should the project manager conclude?
-
What is the difference between risk appetite and risk threshold? Provide an example of each.
-
If an organization has a low risk appetite, would its risk threshold be narrower (e.g., ±3%) or wider (e.g., ±15%) around an objective?
-
During a risk review, the project manager finds that risk exposure has decreased below the risk threshold. What is the appropriate next step?
-
Can risk thresholds be different for cost, schedule, and quality objectives within the same project? Explain.
PMBOK v8 Reference
Section 11.1.2.3 - "Risk Threshold" (Part of Plan Risk Management process) and Section 11.5.2.4 - "Risk Threshold" (Part of Plan Risk Responses process). Also referenced in the glossary definition: "The measure of acceptable variation around an objective that reflects the risk appetite of the organization and stakeholders."