Which project document is used to respond to and provide information on threats and opportunities that may impact project execution?

The risk register is a living document that captures each identified risk, its probability and impact, risk owners, and planned responses for both threats and opportunities. It is directly used by the project team to track and respond to risks as they emerge or evolve during project execution.

The risk report provides a summary-level view of overall risk exposure for stakeholder communication, but is not the working document used to respond to individual risks.

Root cause analysis is a technique used after a problem occurs to determine its underlying cause, not a proactive risk response document.

The change log records approved and rejected change requests, not risk information or response strategies.