A project manager is identifying the risks of a project. Which technique should the project manager use?

Representations of uncertainty, such as probability distributions, are used in quantitative risk analysis to model ranges of possible outcomes, not to identify risks in the first place.

Prompt lists are structured checklists or hierarchical frameworks used during the Identify Risks process to stimulate thinking about risk sources across categories such as technical, external, organizational, and project management. They guide the team to consider risks they might otherwise overlook, making them a direct tool for risk identification.

Audits are used during risk monitoring and control to evaluate the effectiveness of risk responses and the risk management process, not during initial risk identification.

Risk categorization is applied after risks have been identified to group and prioritize them, not as a technique to discover new risks.