Risk Mitigation
A risk response approach in which the project team takes actions to lower the likelihood that a threat will happen or to reduce its impact.
Key Points
- Focuses on negative risks (threats) by reducing their probability, impact, or both.
- Implemented through proactive measures documented in the risk response plan.
- Assigns a risk owner and monitors residual and secondary risks after actions are taken.
- Different from avoidance (eliminate the threat), transfer (shift it to a third party), and acceptance (acknowledge with minimal action).
Example
A key component might arrive late, threatening the schedule. The project manager adds a schedule buffer, negotiates earlier shipment, and qualifies an alternate supplier to reduce the chance and effect of a delay.
PMP Example Question
A performance risk could delay go-live if the system cannot handle peak load. The team schedules early load testing, optimizes code, and configures autoscaling. Which risk response is being used?
- Avoidance
- Mitigation
- Transfer
- Acceptance
Correct Answer: B — Mitigation (reduce likelihood or impact of a threat)
Explanation: The team is taking proactive steps to lower the chance and potential impact of the performance issue, which is mitigation.
