4.1 Risk Identification, Assessment & Response Strategies
Execute qualitative and quantitative risk analysis, utilize Expected Monetary Value (EMV) and Monte Carlo models, and select threat vs opportunity response strategies.
🎯 Key PMI PMP® Exam Takeaways
- Qualitative Risk Analysis rapidly scores probability and impact to rank risks for response planning or the watchlist.
- Quantitative Risk Analysis (Monte Carlo simulation, EMV decision trees) calculates probabilistic financial and schedule distributions.
- Threat response strategies: Avoid (eliminate), Transfer (shift impact/insurance), Mitigate (reduce prob/impact), Accept (contingency), Escalate.
- Opportunity response strategies: Exploit (guarantee 100%), Share (joint venture), Enhance (increase prob/impact), Accept, Escalate.
- Secondary risks are new risks introduced as a direct result of implementing a risk response.
Project risk is an uncertain event or condition that, if it occurs, has a positive or negative effect on one or more project objectives. Effective risk management begins with comprehensive risk identification documented in the Risk Register.
Identified risks are prioritized through Qualitative Risk Analysis, scoring probability and impact on a matrix. High-priority risks undergo Quantitative Risk Analysis using tools like Monte Carlo simulation to forecast statistical confidence curves, or Expected Monetary Value (EMV) decision trees to evaluate financial paths under uncertainty.
Project managers formulate tailored responses: for threats, Avoidance eliminates the hazard, Transfer shifts financial risk to third parties via insurance or fixed-price contracts, Mitigation deploys safeguards, and Acceptance establishes reserves. For opportunities, Exploitation guarantees the upside, Sharing partners with third parties, and Enhancement magnifies probability or impact.
⚠️ Common PMI Exam Traps
- Confusing Mitigate with Avoid; Mitigate reduces probability/impact, while Avoid changes the plan to eliminate the threat entirely.
- Applying threat strategies (Avoid/Mitigate) to positive opportunities; opportunities use Exploit, Enhance, Share, Accept, and Escalate.
Knowledge Checkpoint
An international logistics project faces four distinct threats: Threat 1 is eliminated entirely by changing software vendors; Threat 2 is insured with a commercial policy; Threat 3 has its probability reduced by installing firewalls; Threat 4 is documented with no action taken. What are the four respective risk strategies?