HKSM
Risk Tolerance
The amount of uncertainty and potential impact that business stakeholders are willing to accept before they expect changes or escalation.
Key Points
- Defines the acceptable range of risk exposure (e.g., cost variance, schedule slip, defect rate) stakeholders can live with.
- Can vary by risk category and stakeholder; document it in the risk management plan and team working agreements.
- Guides risk response choices and escalation triggers; exceeding tolerance signals the need for action.
- Should be reviewed and adjusted as business priorities, constraints, or leadership change.
Example
During planning, the sponsor states: "We can accept up to a +10% cost overrun and up to one sprint of schedule delay, but no critical security defects." The project team uses these limits to prioritize risks and define when to escalate or implement response plans.
PMP Example Question
While setting risk parameters, the team documents that stakeholders are comfortable with cost variance between -5% and +10%; outside this band, the project manager must escalate. What does this primarily describe?
- Risk appetite
- Risk tolerance
- Risk threshold
- Risk exposure
Correct Answer: B — Risk tolerance
Explanation: The described acceptable band reflects the range of risk stakeholders will withstand before action is required, which is risk tolerance. A threshold is a specific point, while appetite is a broader, qualitative stance toward risk.
