Concept and mechanism
Monitoring risk requires comparing current information with the basis used for decisions. Check whether action was implemented, whether it produced the intended effect, and whether new exposure emerged. Installing redundancy differs from demonstrating recovery; missing test records show an evidence gap but do not by themselves prove the solution fails. Maintain residual and secondary assessments with owners and a frequency proportionate to exposure. A chart with fewer red risks represents improvement only if changes, closures, and reclassifications have a basis. Deleting entries can change counts without changing the service.
Guided application
Update assessment when scope, volume, dependencies, or resources change. Distinguish approved baseline from current forecast and communicate reserve consumption alongside remaining exposure. Close a risk when criteria are met and its exposure period has ended, preserving evidence and history. If exposure continues after the project, APS handover needs acceptance, an owner, triggers, actions, and information access. A certificate expiring in two months does not stop mattering because the budget closes today. Record specific lessons: validating backups and access before the window is more useful than “communicate better.” Learning should produce a change the next team can execute and verify.
Accepted delivery may close transport risk; future renewal risk needs an operational owner.
Common pitfalls
Closed task as eliminated risk; color without evidence; hidden forecast; emailed handover without acceptance.
Related topics: Context, appetite, and decision rights · Organize people, cadence, and resources
Close with evidence or transfer with acceptance; do not leave exposure ownerless.
Reference: PMI-RMP Exam Content Outline · PMI-RMP five-domain ECO, updated-2024 public document