Which statement best describes risk management in a project?

Which statement best describes risk management in a project?

• A. Risks are identified and ignored.
• B. A risk register is optional.
• C. A risk management plan is unnecessary in most projects.
• D. Risks are identified, assessed for severity and impact, and a risk response plan exists

Answer: (D)

Risk management in a project means taking a proactive, structured approach to potential problems. You start by identifying what could go wrong, then assess how likely it is and how severe the impact would be on scope, schedule, cost, and quality. With that assessment, you prioritize risks and develop a risk response plan that specifies actions to reduce probability or lessen impact, assigns ownership, and sets triggers for when contingency plans should be put in place. A living risk register documents all identified risks, their assessments, responses, and status, while the risk management plan guides how these activities will be carried out throughout the project. This combination—identification, assessment for severity and likelihood, and a concrete risk response plan—embodies a purposeful, actionable approach to handling uncertainty, which is why it’s the best description of risk management. The other options describe behaviors that would leave risks unmanaged or undermine how risks are tracked and addressed, which is not consistent with sound project governance.

Risk management in a project means taking a proactive, structured approach to potential problems. You start by identifying what could go wrong, then assess how likely it is and how severe the impact would be on scope, schedule, cost, and quality. With that assessment, you prioritize risks and develop a risk response plan that specifies actions to reduce probability or lessen impact, assigns ownership, and sets triggers for when contingency plans should be put in place. A living risk register documents all identified risks, their assessments, responses, and status, while the risk management plan guides how these activities will be carried out throughout the project.

This combination—identification, assessment for severity and likelihood, and a concrete risk response plan—embodies a purposeful, actionable approach to handling uncertainty, which is why it’s the best description of risk management. The other options describe behaviors that would leave risks unmanaged or undermine how risks are tracked and addressed, which is not consistent with sound project governance.