During a project, which of the following shows when risks should be reassessed?

Performing risk reassessment only at project closeout is too late to take any preventive or corrective action, making the reassessment operationally useless for managing active threats.

Lessons learned occur after the project has ended and serve as input for future projects, not as a mechanism for managing risks within the current project.

Project risk management standards, including those in the PMBOK Guide, specify that risks must be continuously monitored and reassessed as the project progresses because new risks emerge, existing risks evolve, and project conditions change at every phase. Limiting reassessment to a single point in time leaves the project blind to newly arising threats or opportunities.

Waiting until a risk has materialized into an issue is a purely reactive stance that bypasses the proactive purpose of risk management and typically results in higher impact and cost.