Three Actions When a New Regulation Affects Your Project
During a project, a new regulation is enacted that requires additional compliance testing. The project is in the execution phase. Which THREE actions should the project manager take?
Quick Answer
The answer is to submit a change request to include the compliance testing in the project scope, update the risk register, and communicate the impact to stakeholders. This is correct because a new regulation enacted mid-project represents an external change that must be processed through the integrated change control system; the project manager cannot ignore the legal requirement or proceed without formal approval, as scope changes require a change request to align the project baseline with the new compliance mandate. On the PMP exam, this scenario tests your understanding of how to handle a new regulation mid-project actions during the execution phase, where the key trap is thinking you can simply add the work without a change request or that the regulation is automatically part of the scope. Remember the mnemonic “RCC” for this situation: Risk register update, Change request submission, and Communicate to stakeholders.
⚠ Common exam trap
It's easy for candidates to think immediate action (Option E) is proactive, but PMP best practice requires following the formal change control process before implementing any scope changes, even for regulatory mandates.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Update the risk register with the new regulatory requirement as a threat.
The new regulation introduces an unplanned threat to the project (additional compliance testing), which must be captured in the risk register as a risk event. This aligns with the PMBOK Guide's risk management process, where any new threat or opportunity is documented and assessed for probability and impact.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ignore the regulation because it was not in the original project plan.
Why it's wrong here
Ignoring a legal requirement is not acceptable; the project must comply.
- ✓
Update the risk register with the new regulatory requirement as a threat.
Why this is correct
The new regulation is a risk that should be documented and assessed.
- ✓
Communicate the impact of the new regulation to stakeholders.
Why this is correct
Stakeholders need to be informed of the change and its impact on schedule and cost.
- ✓
Submit a change request to include the compliance testing in the project scope.
Why this is correct
The additional testing is a change that must go through change control.
- ✗
Instruct the team to start compliance testing immediately without formal approval.
Why it's wrong here
Starting work without change control approval violates the project management process.
Go deeper
Related to this question
About these practice questions
One of 800 original PMP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
7 more ways this is tested on PMP
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A new regulatory requirement is discovered mid-project that will require additional deliverables. The project uses a hybrid approach. What THREE actions should the project manager take?
hard- ✓ A.Submit a change request to formally evaluate the impact of the new requirement
- B.Have the team begin working on the new requirement immediately
- ✓ C.Communicate the potential impact to key stakeholders
- ✓ D.Update the risk register with the new regulatory compliance risks
- E.Instruct the team to stop all work until the requirement is analyzed
Why A: (submit change request) is correct as per Integrated Change Control. Option C (update risk register) is correct as new regulatory risks may arise. Option D (inform stakeholders) is correct to manage expectations. Option B is reactive (stop work) without analysis. Option E bypasses the team.
Variation 2. A new regulatory requirement has been announced that will affect your pharmaceutical project's deliverables. The requirement will take effect before your project's planned completion date. What should the project manager do FIRST?
medium- A.Notify the project sponsor and ask for guidance
- ✓ B.Submit a change request to the change control board (CCB)
- C.Incorporate the new requirement into the project plan immediately
- D.Ignore the requirement until it is enforced
Why B: The correct first step is to submit a change request to the change control board (CCB) because a new regulatory requirement that affects project deliverables constitutes a formal change to the project scope, schedule, or cost. The PMBOK Guide mandates that any change to baselined requirements must go through the integrated change control process, where the CCB evaluates the impact on technical specifications, compliance, and project constraints before approval. This ensures the project remains aligned with regulatory standards while managing risks to the pharmaceutical product's validation and market approval.
Variation 3. During a project, a new regulation is introduced that will affect the project's deliverables. The regulation is mandatory and will require changes to the scope. What should the project manager do first?
medium- A.Update the risk register with the regulation as a new risk.
- B.Inform the sponsor that the project will be delayed due to the new regulation.
- ✓ C.Analyze the impact of the regulation on scope, schedule, and cost, and then initiate a change request.
- D.Immediately implement the changes to comply with the regulation.
Why C: When a mandatory regulation impacts project deliverables, the project manager must first analyze the impact on scope, schedule, and cost to understand the full implications. This analysis provides the data needed to initiate a formal change request through the integrated change control process, ensuring the change is evaluated, approved, and documented before implementation. Option C correctly follows the PMBOK Guide's sequence of assess, then request change, rather than jumping to implementation or notification without analysis.
Variation 4. A project manager is informed that a new government regulation will affect the project deliverables. The regulation is mandatory and must be implemented before the project can close. What should the project manager do FIRST?
medium- A.Escalate the issue to the project sponsor for a decision
- B.Update the lessons learned document to capture this experience
- ✓ C.Assess the impact on scope, schedule, and cost, then submit a change request
- D.Continue with the current plan as the regulation may not be enforced
Why C: When a new mandatory regulation impacts project deliverables, the project manager must first assess the impact on scope, schedule, and cost, and then submit a change request to address the regulation. Option A is incorrect because the PM should not escalate without first analyzing the impact. Option B is incorrect because lessons learned are captured after the change is implemented, not as a first step. Option D is incorrect because ignoring a mandatory regulation is non-compliant and could lead to legal issues.
Variation 5. In the middle of a project, new government regulations are introduced that affect your deliverables. Compliance is mandatory. The project is currently on schedule and on budget. What should the project manager do FIRST?
easy- A.Incorporate the changes to comply with the regulation immediately.
- B.Notify the sponsor that the project will be delayed and over budget.
- C.Consult legal to determine the exact requirements.
- ✓ D.Submit a change request to assess the impact of the regulation on the project baselines.
Why D: The PM must assess the impact of the regulation and then follow change control. Option D is correct. Option A bypasses process; Option B is premature; Option C may be needed later but not first.
Variation 6. You are the project manager for a marketing campaign. A new regulation is announced that affects your project's deliverables. The regulation requires additional compliance steps that were not in the original scope. What should you do FIRST?
easy- A.Ignore the regulation because it was not part of the original plan.
- B.Stop the project and reassess feasibility.
- C.Instruct the team to incorporate the compliance steps immediately.
- ✓ D.Evaluate the impact on scope, schedule, and cost, and submit a change request.
Why D: The first step when a new regulation affects the project is to evaluate its impact on scope, schedule, and cost, then submit a change request through the formal change control process. Option D is correct. Option A is incorrect because ignoring the regulation could lead to non-compliance. Option B is incorrect because stopping the project is not the first step; first assess and follow change control. Option C is incorrect because implementing changes without approval bypasses the change control process.
Variation 7. A new regulatory requirement has been introduced that affects your project's deliverables. The requirement must be implemented within the current timeline. What should the project manager do first?
easy- A.Direct the team to incorporate the requirement immediately to avoid non-compliance
- B.Ignore the requirement since the project is already underway
- ✓ C.Assess the impact on the project and submit a change request through change control
- D.Update the project management plan to include the new requirement
Why C: When a new regulatory requirement emerges mid-project, the project manager must first assess its impact on scope, schedule, cost, and quality before any action. Submitting a change request through the formal change control process ensures that the change is evaluated, approved, and documented, maintaining alignment with the project management plan and avoiding unauthorized scope creep. This aligns with the PMBOK Guide's 'Perform Integrated Change Control' process, which mandates that all changes be reviewed and approved before implementation.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PMP practice question is part of Courseiva's free PMI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PMP exam.