PMP · Question #1029
A project manager is assigned to a project. There was a lot of conflict regarding the status of the project and compliance with international regulations. During a regular meeting, the sponsor wanted
The correct answer is A. Risk management plan. To determine the established frequency for risk reviews, the project manager should first refer to the risk management plan.
Question
A project manager is assigned to a project. There was a lot of conflict regarding the status of the project and compliance with international regulations. During a regular meeting, the sponsor wanted to know how frequently the risks are being reviewed. Which document project manager should check first?
Options
- ARisk management plan
- BRisk register
- CIssue log
- DRisk report
How the community answered
(43 responses)- A77% (33)
- B5% (2)
- C14% (6)
- D5% (2)
Why each option
To determine the established frequency for risk reviews, the project manager should first refer to the risk management plan.
The risk management plan is the document that defines how risks will be identified, analyzed, responded to, and monitored, including the frequency and methods for reviewing project risks. It sets the framework for risk management activities throughout the project.
The risk register lists individual risks and their current status but does not prescribe the process or frequency of formal risk reviews.
The issue log tracks problems that have already occurred, which is different from how frequently potential risks are formally reviewed.
A risk report summarizes the overall risk posture and could include review outcomes, but it does not define the schedule or methodology for future risk reviews.
Concept tested: Project risk management planning
Topics
Community Discussion
4
Samuel O.Jan 21, 2026A is correct here. The risk management plan is where you document the methodology and cadence for how risks get reviewed, not the register itself. In my experience managing compliance-heavy projects, the sponsor always wants to know the process and frequency, and that information lives in the plan. The risk register tells you what the risks are, but it will not tell you how often you are sitting down to revisit them.
Toby R.Jan 26, 2026Confirmed A on exam last month. Risk review frequency lives in the risk management plan.
Mateus R.Jan 28, 2026Spot on, Toby, and I always remember it like this: the risk management plan is the recipe card that tells you how often to taste the soup, while the risk register is the bowl where you jot down which spoonfuls tasted off.
Mateus R.Jan 28, 2026Got A on my exam last May, the "how frequently" wording screams plan not register.