On which of the following documents you work throughout the risk management processes?

The risk management plan defines the approach and methodology for risk management and is primarily created once during planning; it does not serve as the active tracking document throughout all processes.

The project management plan is the overarching document encompassing all subsidiary plans; it is not the specific document worked through during risk management processes.

The risk register is initiated during risk identification and is continuously updated through every subsequent risk management process - qualitative analysis, quantitative analysis, risk response planning, and risk monitoring and control. Because it captures risk details, probability, impact, response strategies, and status, it is the one document worked on throughout the entire risk management lifecycle.

The project charter is an initiation document that formally authorizes the project and is not updated or referenced as a working document during risk management.