You are the project manager for your organization. You have determined that an activity is too dangerous to complete internally so you hire licensed contractor to complete the work. The contractor, ho

Internal risks originate from inside the performing organization; this new risk was introduced by an external contractor engaged to handle the original risk.

A secondary risk is defined as a risk that emerges as a direct consequence of implementing a risk response strategy. By transferring the dangerous work to a contractor (transference), a new risk was created - the contractor may not finish on time - which is the textbook definition of a secondary risk in PMI methodology.

Pure risk refers to a scenario that can only produce a loss with no chance of gain, which does not specifically describe the type of risk created by a response action.

Transference is the risk response strategy used (shifting the dangerous work to the contractor), not the classification of the new delay risk that resulted from it.