PMP · Question #1404
A project manager is working on a software development project. The project manager and the project team identified the project risks. As the project progressed one of the risks materialized and the…
The correct answer is A. Risk occurred. A risk is moved from the risk register to the issue log once it has materialized or occurred, transforming from a potential future event into an actual problem or incident that requires immediate attention and resolution.
Question
A project manager is working on a software development project. The project manager and the project team identified the project risks. As the project progressed one of the risks materialized and the project manager referred to the risk management plan to determine how to manage the risk. Once the risk management strategy was chosen and implemented the risk was closed. At what point did the project manager move the risk from the risk register to the issue log?
Options
- ARisk occurred
- BRisk monitored
- CRisk managed
- DRisk identified
How the community answered
(31 responses)- A90% (28)
- B6% (2)
- C3% (1)
Why each option
A risk is moved from the risk register to the issue log once it has materialized or occurred, transforming from a potential future event into an actual problem or incident that requires immediate attention and resolution.
In project management, a risk is a potential future event. When that potential event actually happens, it is no longer a risk but an issue. Therefore, the project manager moves the entry from the risk register, which tracks potential risks, to the issue log, which tracks actual problems, as soon as the risk materializes or occurs.
Risk monitoring is the ongoing process of tracking identified risks, identifying new risks, and evaluating risk process effectiveness, but it doesn't signify that a risk has occurred.
Risk managed implies that a response strategy was chosen and implemented, but this happens after the risk has occurred and become an issue, not at the point of transition.
Risk identified is the initial step where potential risks are recognized and documented in the risk register, long before they might materialize into issues.
Concept tested: Risk vs. Issue management
Source: https://www.pmi.org/pmbok-guide-standards/foundational/pmbok/risk-management
Topics
Community Discussion
8A is correct. The moment a risk materializes and becomes a reality, it stops being a potential future event and becomes an active issue, so that is the exact trigger for moving it to the issue log.
Confirmed A on exam last week. C is the trap because people figure the transition happens once you start managing it, but the trigger is occurrence itself, that is the moment a risk converts to an issue.
Good catch on the occurrence trigger, but worth adding that the same logic applies in reverse for opportunities: a positive risk materializing into a realized benefit is also about occurrence, not about whether you have started exploiting it yet.
Got this one on my exam and I second-guessed myself because I thought "managed" made more sense since that is when you are actively doing something about it, but my mentor had drilled into me that the risk register is for potential risks and the issue log is for things that have actually happened, so the move happens the moment the risk occurs (option A), not when you are managing it afterward. Once that clicked I stopped overthinking and never got that type of question wrong again.
Confirmed A on my exam last week. I overthought this exact question on my first attempt and picked C, but the trigger is simple: the moment a risk actually occurs it stops being a risk and becomes an issue, so that is when it moves to the issue log.
Risk became an issue the moment it occurred, not after you managed it. A.
A is correct here, though the wording feels a bit abrupt. The moment a risk actually occurs it stops being a potential future event and becomes a real problem you are dealing with right now, so that is the point where it moves from the risk register to the issue log.
Grace is right but I would add that the risk stays in the register too, just flagged as occurred, so you are not deleting it, you are tracking it in both places until the issue is resolved.