PMI-RMP Risk Monitoring And Reporting — 10 Questions

Question 1

Which THREE types of risks should always be included on a 'Watchlist' for regular monitoring?

Accepted Answer

Accepted risks that do not require active mitigation. The three correct answers are C, D, and E. Accepted risks that do not require active mitigation (C) still belong on a watchlist because acceptance is a conscious decision that must be periodically revisited in case the risk's probability, impact, or the organization's tolerance changes. Risks that are currently deferred (D) are not eliminated; they are postponed, so they must be monitored to ensure the deferral remains valid and that they do not escalate into active issues. Low-priority risks (E) are also watchlist candidates because their low rating may change over time as project conditions evolve, and they could become higher-priority threats if left unmonitored. Options A and B do not belong: risks that have already been resolved (A) are closed and no longer require monitoring, and critical path risks (B) are typically actively managed through mitigation or contingency plans rather than merely watched.

Answer

Risks that have already been resolved

Answer

Critical path risks

Question 2

You are the risk manager on a large infrastructure program. During the monthly risk review, the program manager asks for the current overall risk exposure. You have updated the probability and impact values for all active risks in the risk register, but you have not yet recalculated the contingency reserve. What should you do FIRST to provide an accurate risk exposure figure?

Accepted Answer

Recalculate the contingency reserve using the updated probability and impact values for all active risks.. The contingency reserve is derived from the expected monetary value of risks. When probability and impact values change, the reserve must be recalculated to reflect the updated risk exposure. This ensures that the program has sufficient funds to cover potential risk impacts. Providing an accurate risk exposure figure requires an up-to-date reserve, making recalculation the essential first step before any further analysis or reporting.

Answer

Review the risk register to ensure all risks have been assigned an owner and that response plans are in place.

Answer

Report the updated probability and impact values to the program manager and ask for guidance on how to proceed.

Answer

Perform a Monte Carlo simulation using the updated probability and impact data to determine the range of possible outcomes.

Question 3

A risk audit has just been completed. What is the most critical activity to perform with the findings?

Accepted Answer

Update the risk management plan and register. A risk audit evaluates the effectiveness of risk management processes and identifies areas for improvement. The most critical follow-up is to update the risk management plan and risk register with findings, ensuring that lessons learned are incorporated and that risk responses are adjusted. This closes the loop on the audit and supports continuous improvement.

Answer

Discard the report to avoid negative visibility

Answer

Request a project budget increase immediately

Answer

Send the report to external regulatory bodies

Answer

Delete the risks identified during the audit

Question 4

During project execution, you find that the 'Risk Response Owner' is not reporting updates. How should this be addressed within the project governance framework?

Accepted Answer

Escalate the accountability issue to the project sponsor. In project governance, the Risk Response Owner is accountable for executing and reporting on risk responses. If they fail to report, the issue is an accountability gap that should be escalated to the project sponsor, who has the authority to enforce governance and address performance issues. This maintains transparency and ensures the risk management process remains effective.

Answer

Update the risk yourself and hide the lack of participation

Answer

Assign a new owner without informing the original owner

Answer

Remove the risk from the register

Question 5

You are performing a periodic risk reassessment. A key risk has shifted from 'Low' to 'High' probability. What is the next immediate step in the reporting workflow?

Accepted Answer

Update the Probability and Impact Matrix and trigger a stakeholder notification. When a risk's probability shifts from Low to High, the immediate step is to update the Probability and Impact Matrix to reflect the new risk rating and trigger a stakeholder notification as per the communication plan. This ensures the risk is re-prioritized and stakeholders are aware of the increased exposure. The matrix update is foundational for subsequent response planning.

Answer

Schedule an immediate Steering Committee meeting

Answer

Close the risk and add it to the Issues Log

Answer

Immediately activate the contingency reserve

Question 6

You are configuring a risk dashboard in a PMIS. Stakeholders need to see the 'Risk Burn-down' trend. Which data point must be tracked consistently to enable this report?

Accepted Answer

Aggregate risk exposure value. The Risk Burn-down trend tracks the aggregate risk exposure value over time, showing how the total risk exposure decreases as risks are mitigated or closed. This requires consistent tracking of the aggregate exposure value, typically calculated as the sum of probability times impact for all open risks. Without this data point, the burn-down chart cannot be generated.

Answer

Owner assignment frequency

Answer

Total number of risks identified

Answer

Number of risk responses completed

Question 7

When monitoring risk triggers, what is the primary purpose of a 'Risk Trigger' threshold field in your project management software?

Accepted Answer

To provide an objective indicator that a risk is about to occur. The primary purpose of a risk trigger threshold field is to provide an objective, measurable indicator that a risk is about to occur, enabling timely activation of the response plan. It sets a specific value or condition that, when met, signals the need for action. This supports proactive risk management rather than reactive firefighting.

Answer

To automate the closure of the risk entry

Answer

To define the escalation path for the project manager

Answer

To notify the finance department of budget changes

Question 8

During a risk audit, you identify that a previously closed risk has manifested. What is the most appropriate action to ensure accurate project risk status?

Accepted Answer

Re-open the existing risk and update the response plan. When a previously closed risk manifests, the most appropriate action is to re-open the existing risk and update its response plan. This maintains the integrity of the risk register, ensures the risk is actively managed again, and allows the team to apply the planned response or adjust it based on current conditions. It also preserves the historical link between the original risk and its realization.

Answer

Archive the risk to maintain the dashboard clarity

Answer

Create a new risk entry in the Risk Register

Answer

Update the Lessons Learned repository only

Question 9

You are assessing the effectiveness of a risk mitigation strategy. Which metric best indicates if the mitigation is working?

Accepted Answer

The change in residual risk exposure. The purpose of risk mitigation is to reduce the probability and/or impact of a risk, which is measured by the change in residual risk exposure — the risk that remains after the response is applied. If residual exposure drops relative to the pre-mitigation assessment, the mitigation is working. This metric directly ties the response action to its intended effect on the risk profile, making it the most valid indicator of effectiveness.

Answer

Number of audit findings related to risk

Answer

Total number of risks managed

Answer

The frequency of steering committee meetings

Question 10

Which report type is best suited for providing senior management with a high-level view of current risk status versus the risk appetite threshold?

Accepted Answer

Risk Heat Map. A risk heat map visually plots probability against impact and highlights which risks exceed the organization's risk appetite thresholds. Senior management can quickly see the overall risk posture and where intervention is needed. This makes it the best high-level reporting tool for comparing current risk status to appetite.

Answer

Individual Risk Response Plan

Answer

Project Schedule Variance Report

Answer

Risk Register Detail Report