PMI-RMP Course Notes

Build the risk framework before analyzing individual risks. Start with relevant documents and project context, understand organizational risk appetite, convert that appetite into usable project thresholds, then define the risk strategy, plan, roles, criteria, communication, and stakeholder engagement. On the exam, favor alignment, tailoring, and shared understanding before jumping to a tactical response.

• Treating every available document as equally important.

• For 'first' or 'best next' questions, establish context and alignment before selecting a tactical response.

Find credible threats and opportunities, test the assumptions and constraints behind them, define observable triggers and usable thresholds, then capture the result in a risk register with the right attributes and owner. Identification is about discovering and structuring uncertainty—not prematurely choosing a response.

• Calling every negative project condition a risk without checking whether it is actually uncertain.

• Identify first; analyze and respond later unless the question explicitly asks for the response.

Qualitative analysis sorts and prioritizes risks using agreed categories, definitions, matrices, impact, and urgency. Quantitative analysis uses numerical data and models to estimate exposure and support decisions. Choose the technique that matches the question: matrix/RBS for structured qualitative prioritization; EMV/decision tree for probability-weighted choices; Monte Carlo for distributions and many interacting uncertainties; sensitivity analysis for key drivers.

• Using quantitative techniques when inputs are too weak or the question only needs qualitative prioritization.

• Technique selection is a major test pattern: match the tool to the data and decision needed.

Choose a response that fits the risk type, appetite, objectives, and available authority; convert the strategy into time-bound actions with owners; then execute, measure, communicate, and adjust. Threat strategies reduce or shift downside; opportunity strategies increase or secure upside. Every implemented response can leave residual risk or create secondary risk.

• Calling every response 'mitigation.'

• First identify whether the uncertain event is a threat or opportunity.

Use current performance data to see whether risk exposure is changing and whether responses are working. Reconcile actuals to baselines, analyze variance, track residual/secondary risk, update the right project records, communicate the current risk level to the right audience, and formally close risks that have expired or are no longer active.

• Confusing actual performance with the baseline.

• Monitoring questions start with trustworthy current data.