PMP Process — Managing Technical Aspects Practice Question
A critical risk identified in the risk register has occurred. The planned response was to mitigate, but the impact is higher than anticipated. What should the project manager do FIRST?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement the planned mitigation response and then reassess the situation
The risk response plan should be executed first, then reassess and update the risk register. PMI recommends implementing the planned response and evaluating its effectiveness.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Develop a new response from scratch because the impact changed
Why it's wrong here
Developing a new response from scratch is premature and inefficient when a pre-defined mitigation plan already exists for a critical risk. The project team has invested time in planning these responses, and the first course of action is always to execute the established strategy. New responses are only developed if the existing plan proves ineffective or the situation significantly deviates from the original assessment *after* initial implementation.
- ✗
Update the risk register and ignore the planned response
Why it's wrong here
Merely updating the risk register and ignoring the planned response is a passive and irresponsible approach to risk management. The purpose of proactive risk planning is to have a ready strategy for immediate execution when a risk materializes, not just to document its occurrence. Failing to implement the agreed-upon response negates all prior planning efforts and leaves the project vulnerable to unmitigated impacts.
- ✓
Implement the planned mitigation response and then reassess the situation
Why this is correct
When a critical risk materializes, the immediate and most appropriate action is to execute the pre-defined mitigation response documented in the risk register. This proactive step is crucial for minimizing negative impacts and stabilizing the situation according to the established plan. Following the implementation, a reassessment is necessary to evaluate the effectiveness of the response and determine if further actions, such as developing new strategies or escalating, are required.
- ✗
Escalate the risk to the project sponsor immediately
Why it's wrong here
Immediately escalating the risk to the project sponsor without first attempting to implement the planned response is generally inappropriate and bypasses the project manager's responsibility. The project manager is expected to manage risks within their authority and execute agreed-upon plans to demonstrate control. Escalation becomes necessary only if the planned response is insufficient, exceeds the PM's authority, or the impact is greater than anticipated *after* initial mitigation efforts.
Go deeper
Related to this question
About these practice questions
One of 820 original PMP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on PMP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. You are managing a project that is currently in the execution phase. A risk event that was identified and included in the risk register has occurred. The planned response is to mitigate the risk. Which TWO documents should you update to reflect the occurrence and response? (Choose two.)
easy- A.Stakeholder engagement plan
- ✓ B.Risk register
- ✓ C.Lessons learned register
- D.Project schedule
- E.Cost baseline
Why B: The Risk register (B) must be updated because it is the central document that records the risk event's occurrence, its actual impact, the mitigation response taken, and the risk's status change from open to occurred/closed. The Lessons learned register (C) should also be updated to capture how the risk was handled, what worked or didn't in the mitigation, and recommendations for future projects, which is a standard practice throughout execution. The Stakeholder engagement plan (A) is not updated for a risk occurrence since it governs how stakeholders are involved, not risk responses. The Project schedule (D) may be affected by the mitigation but is not the document that reflects the risk occurrence and response itself. The Cost baseline (E) is only changed through formal change control if the mitigation requires additional approved funds, not as a direct update for recording the risk event.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PMP practice question is part of Courseiva's free PMI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PMP exam.