PMI PMI-RMP - PMI Risk Management Professional (PMI-RMP) Exam

The project manager should first gather more information about the previous project ' s issues by interviewing the other project manager. This will help in understanding the root causes of the delay and how to prevent similar issues in the current project before taking further action.

 The project manager should first include the risk of delay in delivery of the GTG in the risk register and communicate with the stakeholders about the potential impact and response strategies. This is part of the risk identification process, which is the first step in risk management. The risk register is a document that records the identified risks, their causes, effects, probabilities, impacts, and response plans. The project manager should communicate with the stakeholders to ensure that they are aware of the risk and its implications, and to obtain their feedback and support. The project manager should also update the risk register as new information becomes available or as the risk status changes. The other options are not the first actions that the project manager should take. Communicating with the client to provide the previous shutdown plan is part of the risk response process, which comes after the risk identification and analysis processes. Reviewing and updating the project schedule is part of the schedule management process, which is not directly related to risk management. Interviewing the other project manager to learn more details is a technique that can be used to identify risks, but it is not the first action that the project manager should take. The project manager should first document the risk in the risk register and communicate with the stakeholders before seeking more information from other sources. References: 3, 4, 5

The correct answer is B. Develop a contingency plan to cover additional logistics expenses.

This question describes a secondary risk , meaning a new risk created by the implementation of a prior risk response. The original response to supply chain disruption may have been appropriate, but it introduced an additional uncertainty: increased logistics costs. Once a secondary risk is identified, the risk manager should treat it as a normal project risk by analyzing it and determining an appropriate response. In this case, the most suitable response among the options is to develop a contingency plan for the potential added cost exposure.

A contingency plan is appropriate because the project may now face additional expenses that are uncertain in timing or magnitude. Planning for those costs provides a structured and proactive method of managing the new exposure without assuming it must automatically be accepted.

Why the other options are incorrect:

A. Accept the increased costs as part of the project ' s risk threshold. Acceptance may be appropriate in some situations, but the scenario does not indicate that the increased costs are within approved thresholds or that active planning is unnecessary. Immediate acceptance is weaker than preparing a specific response.

C. Switch suppliers to potentially reduce logistics expenses. This may create further disruption or additional risks and is not necessarily the most appropriate first response. The question asks how to address the newly identified risk, and contingency planning is the stronger risk-management action.

D. Incorporate a cost-sharing arrangement with the suppliers. This is a possible contractual tactic, but it is narrower and assumes supplier agreement. It may be part of a response strategy, but it is not the best general answer compared with a formal contingency plan.

Best-practice reasoning:

Secondary risks should be documented, analyzed, assigned, and responded to. When the new risk affects project cost, one practical response is to establish a contingency approach to manage the financial uncertainty if the risk materializes.

Reference-aligned basis:

This answer is consistent with standard risk management guidance that emphasizes:

risk responses can generate secondary risks,

secondary risks should be assessed and managed like any other identified risk,

contingency planning is a recognized way to address uncertain future cost impacts.

sensitivity analysis is a technique that helps to determine which risks have the most potential impact on the project. It examines the extent to which the uncertainty of each project element affects the objective being examined when all other uncertain elements are held at their baseline values. Sensitivity analysis is often used to assess the risk exposure of the project schedule and cost, and to identify the critical risks that need to be managed. In this case, the risk manager needs to understand how the new risk resulting from the delay will affect the project deadline, which is the objective being examined. By performing sensitivity analysis, the risk manager can compare the relative importance and interaction of the new risk with other existing risks, and determine the worst-case scenarios for the project completion date. Sensitivity analysis can also help to prioritize risks for response planning and to develop contingency reserves. This is part of the Perform Quantitative Risk Analysis process in the PMBOK® Guide2. References: 1: PMI Risk Management Professional (PMI-RMP)® Examination Content Outline 2: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition

The overall goal of selecting strategies during the Plan Risk Response activity is to choose those strategies that have the greatest overall positive influence on the project, considering factors such as cost, schedule, and resources.

According to the PMI Risk Management Professional (PMI-RMP)® Examination Content Outline1, one of the tasks in the domain of Risk Response is to select risk response strategies based on the risk appetite and tolerance of the organization and stakeholders1. The overall goal of selecting risk response strategies is to select the strategies with the greatest overall positive influence on the project objectives, such as scope, schedule, cost, quality, etc. The risk response strategies should aim to enhance the opportunities and reduce the threats to the project, while considering the cost-benefit analysis, the feasibility, and the alignment with the project goals and stakeholder expectations2. The risk response strategies should not be selected based on the least overall impact to resources, because that may not be the most effective or efficient way to address the risks, and it may ignore the potential benefits of some strategies that may require more resources but also deliver more value3. The risk response strategies should not be selected based on the least financial impact, because that may not be the most relevant or comprehensive criterion to evaluate the risks, and it may overlook other aspects of the project, such as quality, customer satisfaction, reputation, etc. that may also be affected by the risks4. The risk response strategies should not be selected based on the greatest benefit to stakeholders, because that may not be the most realistic or achievable goal, and it may create conflicts or trade-offs among different stakeholder groups that may have different or competing interests, needs, and expectations5. References: 1: PMI Risk Management Professional (PMI-RMP)® Examination Content Outline, page 102: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, page 4403: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, page 4414: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, page 4425: A Guide to the Project Management Body of Knowledge (PMBOK® Guide) – Sixth Edition, page 518.

 

When a project is delayed, and all contingency reserves have been exhausted, the next step is to escalate the situation to upper management. This escalation allows for additional resources or support to be considered and for strategic decisions to be made at a higher level. According to PMI’s risk management practices, escalation is a key strategy when risks exceed the project ' s control, requiring input or intervention from senior management to resolve​.

Top of Form

Bottom of Form

 

Lessons learned from previous projects are critical for effective risk identification because they provide insights into what risks materialized, how they were managed, and what could have been improved. According to the PMBOK® Guide:

“Lessons learned from previous projects are organizational process assets that should be reviewed during risk identification to avoid repeating past mistakes and to leverage successful risk responses.”

— PMBOK® Guide, 6th Edition, Section 11.2.2.1 (Organizational Process Assets)

These assets enable proactive identification and management of similar risks in the new project.

The expected outcome of developing the risk management plan is to define how risk management activities will be executed throughout the project. This includes the processes, tools, and techniques that will be used to identify, assess, and manage risks.

 The risk management plan is a document that describes how risk management activities will be structured and performed throughout the project. It provides guidance on how to identify, analyze, respond, monitor, and control risks, as well as how to communicate, document, and report them. The risk management plan also defines the roles and responsibilities of the project team and stakeholders in risk management, the risk categories and breakdown structure, the risk thresholds and appetite, the risk management tools and techniques, and the risk management budget and schedule. The risk management plan is an output of the plan risk management process, which is the first process in the project risk management knowledge area. Developing the risk management plan is essential for ensuring that the project risks are closely managed and aligned with the project objectives and stakeholder expectations. References: PMI, Project Risk Management, 2nd edition, 2019, p. 67-681

During risk identification, the risk manager should ensure the following actions are performed:

A. Develop checklists based on historical information: Checklists are valuable tools in risk identification as they draw from previous projects ' experiences and ensure that commonly encountered risks are not overlooked.

B. Conduct interviews, meetings, and focus groups: These are key methods for gathering qualitative data from stakeholders, which can reveal potential risks based on their experiences and expectations.

D. Employ brainstorming to generate spontaneous ideas: Brainstorming is an effective technique for generating a wide range of potential risks quickly, allowing the project team to explore various scenarios and possibilities.

These actions align with PMI’s best practices for comprehensive risk identification, ensuring that all possible risks are considered and documented​​.

 

 

The project risk manager should monitor risk thresholds closely, as they represent the organization ' s risk appetite. In a project with a low risk appetite, it is essential to ensure that risks are managed within the defined thresholds to address stakeholders ' concerns and maintain their confidence in the project ' s success.

According to the PMI Risk Management Professional (PMI-RMP) Reference Materials, risk thresholds are the measure of acceptable variation around an objective that reflects the risk appetite of the organization1. Risk appetite is the degree of uncertainty an entity is willing to take on in anticipation of a reward2. In this case, the project has a significant impact on the organization and the stakeholders have a low risk appetite, meaning they are not willing to accept much deviation from the project objectives. Therefore, the project risk manager should monitor the risk thresholds closely to ensure that the project risks do not exceed the acceptable level of variation and impact the project performance negatively. By monitoring the risk thresholds, the project risk manager can also identify when risk responses are needed and evaluate their effectiveness.

The correct answer is B. Perform sensitivity analysis.

Sensitivity analysis is used to determine which individual risks or uncertainties have the greatest effect on overall project outcomes . It helps the risk manager understand which variables or risks matter most and therefore where response efforts are most critical. In this question, the risk manager wants to know which risk will have an impact on the project outcome and to assess the effectiveness of response planning by understanding impact drivers. Sensitivity analysis is the best fit for that purpose.

This technique is commonly used in quantitative risk analysis to identify which uncertainties most influence objectives such as cost, schedule, or performance. It often supports prioritization of risk responses by showing where management attention will produce the greatest benefit.

Why the other options are incorrect:

A. Perform Pareto analysis. Pareto analysis helps identify the most significant contributors among a group of causes or issues, but it is not the primary risk analysis technique used to determine which uncertainties most affect project outcomes in a structured risk context.

C. Perform contingency analysis. Contingency analysis is not the standard technique for identifying which risks most influence project outcomes. Contingency reserves may be determined from risk analysis results, but this option does not directly answer the question.

D. Perform qualitative analysis. Qualitative analysis assesses probability, impact, urgency, and other relative characteristics, but it does not specifically show how much each risk affects the final project outcome compared with others. Sensitivity analysis provides that deeper insight.

Best-practice reasoning:

When a project team needs to identify the risks with the greatest influence on outcomes, sensitivity analysis is the preferred method because it isolates the variables that drive uncertainty and highlights where response plans matter most.

Reference-aligned basis:

This answer is consistent with standard risk management guidance that emphasizes:

sensitivity analysis as a method to determine which risks have the greatest potential effect on project results,

use of analysis outputs to focus response planning and management attention,

support for quantitative understanding of outcome drivers.