PMI PMI-RMP - PMI Risk Management Professional (PMI-RMP) Exam

Monitoring risks during a project ' s lifecycle involves tracking identified risks and ensuring that response plans remain viable and effective. This continuous monitoring helps ensure that the project is prepared to address risks as they arise and that the risk response strategies remain appropriate as the project progresses. PMI guidelines stress the importance of ongoing risk monitoring to adapt to changes in the project environment and to ensure that the project remains on track to meet its objectives​​.

 

Risk identification should be an ongoing process throughout the project lifecycle. Encouraging project team members to proactively identify risks allows for continuous risk management and the development of appropriate response strategies as new risks emerge.

According to the PMI Risk Management Professional (PMI-RMP)® Examination Content Outline1, one of the tasks in the domain of Risk Identification is to ensure that project team members proactively identify risks throughout the project life cycle, using various tools and techniques, to enable planning for possible risk response strategies1. Risk identification is an iterative process that should be performed regularly and frequently throughout the project, as new risks may emerge or existing risks may change due to internal or external factors2. The project manager should involve the project team members and other relevant stakeholders in the risk identification process, as they may have different perspectives, expertise, and insights on the project risks3. The project manager should not identify risks only at the project’s midpoint for the stakeholders to review them, because that would be too late and ineffective to manage the risks that may have already occurred or escalated4. The project manager should not identify risks at the beginning of the project because the risk posture will not change, because that would be unrealistic and imprudent to assume that the project environment and conditions will remain static and predictable5. The project manager should not delegate risk identification to each team member and have them record the risks on separate risk registers for their areas, because that would create inconsistency, duplication, and fragmentation of the risk information, and prevent a holistic and integrated view of the project risks. References: 1: PMI Risk Management Professional (PMI-RMP)® Examination Content Outline, page 82: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, page 3983: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, page 3994: Risk Identification: When and How Often to Do It During the Project Life Cycle5: Risk Management: Why Is It Important?. : Risk Register in Project Management - Project Management Academy.

The stakeholders should prepare a risk-adjusted backlog when making decisions on how to respond to known and new risks. A risk-adjusted backlog helps prioritize work items based on their risk level and potential impact on the project.

 A risk-adjusted backlog is an artifact that reflects the prioritization of the product backlog items based on their risk exposure. It is used to plan for the execution phase of an agile project, where the stakeholders can decide how to respond to known and new risks by selecting the most valuable and least risky items to deliver. A risk-adjusted backlog can help the stakeholders to optimize the value delivery and reduce the uncertainty of the project outcomes. References: PMI, The Standard for Risk Management in Portfolios, Programs, and Projects, 2019, p. 113; PMI, Agile Practice Guide, 2017, p. 54.

 

When a risk triggers several other risks that need a quick response, performing a risk urgency assessment is the appropriate course of action. This assessment helps determine how soon a response is required for each risk, considering their potential impact on the project. The PMI guidelines emphasize the importance of urgency in prioritizing risk responses, particularly when the consequences could significantly affect project deliverables if not addressed promptly​.

 

Risk urgency refers to the timeframe within which a risk might occur and necessitates prioritization based on how soon a response is required. When team members express concerns about a lack of time prioritization for an identified risk, they are highlighting the need to assess and address the risk ' s urgency. Evaluating risk urgency involves determining the proximity of the risk event and ensuring that timely actions are planned to mitigate or respond to the risk appropriately. Incorporating urgency assessments into the risk management process helps in allocating resources and attention to risks that require immediate action, thereby enhancing the project ' s resilience against potential threats.

PMI Risk Management Study Guide References:

The PMI-RMP Exam Preparation Study Guide discusses the concept of risk urgency, noting that " understanding the timing of potential risk events is crucial for effective prioritization and response planning. "

According to the PMBOK Guide, 6th edition, Chapter 11: Project Risk Management1, the risk manager should request the risk management plan first from the project sponsor to identify major risks. This is because:

The risk management plan is a document that describes how risk management activities will be planned, structured, and performed throughout the project life cycle. The risk management plan provides guidance and direction for the risk manager and the project team on how to identify, analyze, prioritize, respond, and monitor risks, as well as how to allocate resources, define roles and responsibilities, establish risk categories, and document risk-related information.

The risk management plan is a key input for the risk identification process, which is the process of determining which risks may affect the project and documenting their characteristics. The risk identification process involves using various tools and techniques, such as brainstorming, interviews, checklists, assumptions and constraints analysis, SWOT analysis, expert judgment, and data gathering, to generate a comprehensive list of potential risks that may impact the project objectives, such as scope, schedule, cost, quality, or stakeholder satisfaction.

The risk management plan helps the risk manager to identify major risks by providing the following information:

The risk management strategy, which defines the approach and methodology for managing risks, including the level of detail, rigor, and frequency of the risk management activities, and the alignment with the project management plan and the organization’s policies and procedures.

The risk thresholds, which specify the acceptable level of risk exposure for the project and its objectives, based on the risk appetite, tolerance, and attitude of the project sponsor and other key stakeholders.

The risk categories, which are a group of potential causes of risk that can be used to structure and organize the identified risks into a hierarchical structure, such as a risk breakdown structure (RBS). The risk categories can be derived from various sources, such as the project scope statement, the work breakdown structure (WBS), the organizational process assets, or the industry standards and practices.

The roles and responsibilities, which define the authority and accountability of the project team members and other stakeholders involved in the risk management process, such as the risk manager, the risk owner, the risk committee, the risk auditor, and the risk reviewer.

The resources, which specify the budget, time, and human resources allocated for the risk management process, as well as the tools, techniques, and software applications that will be used to support the risk management activities.

The communication and reporting, which describe the type, format, content, frequency, and distribution of the risk-related information and reports that will be shared among the project team and other stakeholders, such as the risk register, the risk report, the risk dashboard, and the risk audit report.

The other options are not the best documents to request first from the project sponsor to identify major risks because:

The clients’ credit scores are a specific type of data that can be used to assess the credit risk of the loans, but they do not provide a comprehensive view of all the potential risks that may affect the project, such as technical, operational, legal, regulatory, or market risks.

The organization’s mission and vision are high-level statements that describe the purpose, values, and goals of the organization, but they do not provide specific guidance or direction on how to manage risks for the project, such as the risk management strategy, methodology, or tools.

The historical data from the credit portfolio are a source of information that can be used to analyze the past performance and trends of the loans, but they do not reflect the current or future uncertainties and opportunities that may impact the project, such as changes in customer behavior, technology, competition, or regulation.

PMBOK Guide, 6th edition, Chapter 11: Project Risk Management1

Risk Management Professional (PMI-RMP)® Exam Cert Guide2

 

After verifying the effectiveness of the risk responses, the next step is to close out the risk response actions and communicate the results to relevant stakeholders. This ensures that the project team and stakeholders are aware of how risks have been managed and that any lessons learned can be applied to future projects. This aligns with PMI ' s emphasis on communication and documentation in risk management to ensure transparency and continuous improvement​.

 

A risk management plan is the foundational document for risk management. It defines processes, ownership, strategies, and baselines, and must be developed first before other detailed risk actions. PMBOK® Guide specifies:

" The risk management plan is the key document that outlines the approach, processes, roles, responsibilities, and documentation requirements for risk management. "

— PMBOK® Guide, 6th Edition, Section 11.1

The project manager should evaluate the risk with the team and update the issueing to address the concerns of the stakeholders and local businesses.

This concern is a potential risk that could affect the project’s reputation, stakeholder satisfaction, and profitability. The project manager should evaluate the risk with the team and update the issue log, which is a tool for documenting and monitoring the resolution of issues that arise during the project. The issue log should include information such as the issue description, the priority, the owner, the status, and the actions taken. The project manager should also communicate with the stakeholders and the local businesses to address their concerns and seek a mutually beneficial solution. The project manager should not ignore the concern, as it could escalate into a bigger problem. The project manager should not discuss the concern with the local business owners alone, as this could bypass the stakeholders and create more conflicts. The project manager should not update the key risks and perform a quantitative risk analysis, as this is a time-consuming and complex process that may not be necessary for this type of risk. The project manager should not adjust the construction work hours to after business hours, as this could incur additional costs, disrupt the project schedule, and affect the workers’ safety and productivity. References: PMI, 2017. A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition. Newtown Square, PA: Project Management Institute, Inc., pp. 115-116, 408-4091

Establishing a risk management framework and involving the team in developing the risk plan creates ownership and builds risk management capability. PMBOK® Guide states:

" A risk management plan should be developed early in the project and should involve the project team to ensure buy-in and effective implementation. "

— PMBOK® Guide, 6th Edition, Section 11.1