What it means
Project risk response planning selects and designs actions that change probability, impact, exposure, ownership, or preparedness for threats and opportunities.
Why it matters
Responses must be feasible, proportionate, funded, timed, and integrated into delivery rather than recorded as vague intentions.
Practical focus
- Compare response options using effectiveness, cost, timing, side effects, ownership, and residual exposure.
- Assign action owners and integrate response work into schedule, budget, procurement, and change control.
- Define indicators and evidence used to judge implementation and effectiveness.
- Retain the approved definitions, assumptions, decisions, ownership, exceptions, measures, and change history that demonstrate how Project Risk Response Planning operates in real project work.
- Exercise this failure scenario: A register says “mitigate” but contains no action, owner, budget, trigger, or measure of whether exposure actually changed.
Common mistakes
- Using Project Risk Response Planning as a label without defining its scope, owner, decision criteria, and expected evidence.
- Treating a template, meeting, tool screen, or status report as proof that Project Risk Response Planning works consistently in normal delivery.
- Optimizing a single activity while ignoring dependencies, incentives, risk transfer, and the end-to-end outcome.
- Testing only the expected path and never rehearsing this failure condition: A register says “mitigate” but contains no action, owner, budget, trigger, or measure of whether exposure actually changed.
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: