During a project, a key stakeholder asks a project team member to add a requirement. The team member adds the requirement without informing the project manager. Which of the following is described…

A change request is a formal document submitted through the approved change control process to request a modification, which did not occur here because the change was made informally and without authorization.

Risk mitigation involves proactive actions taken to reduce the probability or impact of an identified risk, which is entirely unrelated to an unauthorized addition of a requirement.

Change control is the formal governance process used to evaluate and approve changes to the project baseline; this scenario describes the deliberate bypass of that process, not its application.

Scope creep occurs when the project scope expands incrementally and informally without proper change control authorization, typically through ad hoc additions driven by stakeholder or team requests. In this scenario, the team member bypassed the project manager and the formal change control process, allowing unauthorized work to enter the project. This uncontrolled expansion is the defining characteristic of scope creep - distinguishing it from a formally approved change request.