HKSM
Risk Exposure
The overall level of possible effect from the complete set of risks, evaluated at a specific moment in a project, program, or portfolio.
Key Points
- Represents the combined effect of all risks at a point in time; it changes as risks evolve.
- Often estimated by summing probability-weighted impacts (e.g., EMV) or using risk scoring/heat maps.
- Guides decisions on risk response priorities, contingency reserves, and escalation.
- Can be assessed at project, program, and portfolio levels and rolled up for governance.
Example
An IT project tracks three risks: R1 (30% chance of a USD 200,000 cost hit), R2 (10% chance of a USD 1,000,000 delay cost), and R3 (50% chance of a USD 50,000 rework). The exposure at this time is 0.30*200,000 + 0.10*1,000,000 + 0.50*50,000 = USD 185,000. As risks are mitigated or new risks emerge, this total will rise or fall.
PMP Example Question
A project manager wants a single metric that reflects how severe the overall risk is right now so leadership can set an appropriate contingency reserve. What should the manager use?
- Risk appetite
- Risk threshold
- Risk register
- Risk exposure
Correct Answer: D — Risk exposure
Explanation: Risk exposure consolidates the potential effect of all risks at a specific time, providing a basis for reserves and priority setting.
