Which of the following inputs of Monitor and Control Risks acquires information from performance measurements and evaluates it to provide variance analysis and forecasting?

The risk register is a document that records identified risks, responses, and owners - it does not itself acquire and evaluate performance measurements for forecasting.

Work performance information is raw status data (schedule, cost, scope) collected from executing processes; it has not yet been analyzed into variance analysis or forecasting.

Performance reports are an input to Monitor and Control Risks that compile and synthesize work performance data into variance analysis, trend analysis, and forecasting. They translate raw measurements into interpreted information that project managers use to assess whether risk responses are effective and to identify new risks. This distinguishes them from raw work performance data or the broader project management plan.

The project management plan provides the baselines and management plans used for comparison, but it does not acquire or evaluate performance measurements to produce forecasts.