Three Actions When a New Regulation Affects Your Project
During a project, a new regulation is enacted that requires additional compliance testing. The project is in the execution phase. Which THREE actions should the project manager take?
Quick Answer
The answer is to submit a change request to include the compliance testing in the project scope, update the risk register, and communicate the impact to stakeholders. This is correct because a new regulation enacted mid-project represents an external change that must be processed through the integrated change control system; the project manager cannot ignore the legal requirement or proceed without formal approval, as scope changes require a change request to align the project baseline with the new compliance mandate. On the PMP exam, this scenario tests your understanding of how to handle a new regulation mid-project actions during the execution phase, where the key trap is thinking you can simply add the work without a change request or that the regulation is automatically part of the scope. Remember the mnemonic “RCC” for this situation: Risk register update, Change request submission, and Communicate to stakeholders.
⚠ Common exam trap
It's easy for candidates to think immediate action (Option E) is proactive, but PMP best practice requires following the formal change control process before implementing any scope changes, even for regulatory mandates.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Update the risk register with the new regulatory requirement as a threat.
The new regulation is an external event that introduces uncertainty and potential negative impact on the project, so the project manager should record it in the risk register as a threat (B), which is the standard tool for tracking and managing such risks throughout the project. Because the regulation affects scope, schedule, and cost, the project manager must communicate its impact to stakeholders (C) so they can understand the consequences and make informed decisions. Since the compliance testing adds work not in the original scope, the project manager should submit a change request (D) to formally evaluate and approve the scope change through the integrated change control process. Option A is wrong because ignoring a legal requirement is never acceptable and would expose the project to compliance and legal risk. Option E is wrong because starting work without formal approval bypasses the change control process and violates the project manager's responsibility to manage scope changes properly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ignore the regulation because it was not in the original project plan.
Why it's wrong here
Ignoring the regulation leaves the project non-compliant and exposes the organisation to legal and financial penalties. It tempts teams protecting the baselined scope, yet regulatory changes must be handled through integrated change control, not dismissed because the plan predates them.
- ✓
Update the risk register with the new regulatory requirement as a threat.
Why this is correct
Recording the new regulation in the risk register captures it as an identified threat, enabling qualitative and quantitative analysis, owner assignment, and response planning. This integrates the compliance requirement into the project's existing risk management process during execution.
- ✓
Communicate the impact of the new regulation to stakeholders.
Why this is correct
Communicating the regulation's impact keeps stakeholders informed of schedule, cost, and scope implications, enabling informed decisions and expectation management. This satisfies the project manager's responsibility to engage stakeholders proactively when external changes affect the project during execution.
- ✓
Submit a change request to include the compliance testing in the project scope.
Why this is correct
A new regulation expands scope, so the compliance testing must be formally authorised through integrated change control. Submitting a change request documents the impact on scope, schedule and cost, and secures approval before execution work proceeds, satisfying the constraint that scope changes require formal approval.
- ✗
Instruct the team to start compliance testing immediately without formal approval.
Why it's wrong here
Starting compliance testing without approval bypasses the integrated change control process, so scope, schedule and cost impacts go unassessed and unapproved. It appeals as a fast route to compliance, but formal change requests are required during execution.
Go deeper
Related to this question
About these practice questions
One of 820 original PMP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
7 more ways this is tested on PMP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A new regulatory requirement is discovered mid-project that will require additional deliverables. The project uses a hybrid approach. What THREE actions should the project manager take?
hard- ✓ A.Submit a change request to formally evaluate the impact of the new requirement
- B.Have the team begin working on the new requirement immediately
- ✓ C.Communicate the potential impact to key stakeholders
- ✓ D.Update the risk register with the new regulatory compliance risks
- E.Instruct the team to stop all work until the requirement is analyzed
Why A: (submit change request) is correct as per Integrated Change Control. Option C (update risk register) is correct as new regulatory risks may arise. Option D (inform stakeholders) is correct to manage expectations. Option B is reactive (stop work) without analysis. Option E bypasses the team.
Variation 2. A new regulatory requirement has been announced that will affect your pharmaceutical project's deliverables. The requirement will take effect before your project's planned completion date. What should the project manager do FIRST?
medium- A.Notify the project sponsor and ask for guidance
- ✓ B.Submit a change request to the change control board (CCB)
- C.Incorporate the new requirement into the project plan immediately
- D.Ignore the requirement until it is enforced
Why B: The correct first step is to submit a change request to the change control board (CCB) because a new regulatory requirement that affects project deliverables constitutes a formal change to the project scope, schedule, or cost. The PMBOK Guide mandates that any change to baselined requirements must go through the integrated change control process, where the CCB evaluates the impact on technical specifications, compliance, and project constraints before approval. This ensures the project remains aligned with regulatory standards while managing risks to the pharmaceutical product's validation and market approval.
Variation 3. During a project, a new regulation is introduced that will affect the project's deliverables. The regulation is mandatory and will require changes to the scope. What should the project manager do first?
medium- A.Update the risk register with the regulation as a new risk.
- B.Inform the sponsor that the project will be delayed due to the new regulation.
- ✓ C.Analyze the impact of the regulation on scope, schedule, and cost, and then initiate a change request.
- D.Immediately implement the changes to comply with the regulation.
Why C: When a mandatory regulation impacts project deliverables, the project manager must first analyze the impact on scope, schedule, and cost to understand the full implications. This analysis provides the data needed to initiate a formal change request through the integrated change control process, ensuring the change is evaluated, approved, and documented before implementation. Option C correctly follows the PMBOK Guide's sequence of assess, then request change, rather than jumping to implementation or notification without analysis.
Variation 4. A project manager is informed that a new government regulation will affect the project deliverables. The regulation is mandatory and must be implemented before the project can close. What should the project manager do FIRST?
medium- A.Escalate the issue to the project sponsor for a decision
- B.Update the lessons learned document to capture this experience
- ✓ C.Assess the impact on scope, schedule, and cost, then submit a change request
- D.Continue with the current plan as the regulation may not be enforced
Why C: When a new mandatory regulation affects project deliverables, the project manager must first perform an integrated change control assessment — evaluating the impact on scope, schedule, cost, quality, and risk — before any change is approved. This assessment feeds into a formal change request submitted to the Change Control Board (CCB). Only after approval should the project plan be updated.
Variation 5. In the middle of a project, new government regulations are introduced that affect your deliverables. Compliance is mandatory. The project is currently on schedule and on budget. What should the project manager do FIRST?
easy- A.Incorporate the changes to comply with the regulation immediately.
- B.Notify the sponsor that the project will be delayed and over budget.
- C.Consult legal to determine the exact requirements.
- ✓ D.Submit a change request to assess the impact of the regulation on the project baselines.
Why D: The PM must assess the impact of the regulation and then follow change control. Option D is correct. Option A bypasses process; Option B is premature; Option C may be needed later but not first.
Variation 6. You are the project manager for a marketing campaign. A new regulation is announced that affects your project's deliverables. The regulation requires additional compliance steps that were not in the original scope. What should you do FIRST?
easy- A.Ignore the regulation because it was not part of the original plan.
- B.Stop the project and reassess feasibility.
- C.Instruct the team to incorporate the compliance steps immediately.
- ✓ D.Evaluate the impact on scope, schedule, and cost, and submit a change request.
Why D: In project management, when a change occurs that affects the project's scope, the project manager must first evaluate its impact on the triple constraints (scope, schedule, cost) and then follow the integrated change control process by submitting a change request. This ensures that the change is properly assessed, approved, and integrated into the project plan.
Variation 7. A new regulatory requirement has been introduced that affects your project's deliverables. The requirement must be implemented within the current timeline. What should the project manager do first?
easy- A.Direct the team to incorporate the requirement immediately to avoid non-compliance
- B.Ignore the requirement since the project is already underway
- ✓ C.Assess the impact on the project and submit a change request through change control
- D.Update the project management plan to include the new requirement
Why C: When a new regulatory requirement emerges mid-project, the project manager must first assess its impact on scope, schedule, cost, and quality before any action. Submitting a change request through the formal change control process ensures that the change is evaluated, approved, and documented, maintaining alignment with the project management plan and avoiding unauthorized scope creep. This aligns with the PMBOK Guide's 'Perform Integrated Change Control' process, which mandates that all changes be reviewed and approved before implementation.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PMP practice question is part of Courseiva's free PMI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PMP exam.