Skip to main content

Resolution of risk

Short answer

Resolution of risk means selecting and implementing risk response strategies to address identified risks. For threats, strategies are avoid, mitigate, transfer, or accept; the process includes assigning an owner, developing contingency plans, and monitoring residual risks until closure.

What do you mean by resolution of risk?

Resolution of risk refers to deciding on and implementing the response that deals with an identified risk, so that its probability or impact is reduced (threats) or increased (opportunities), or the risk is accepted knowingly. It corresponds to Plan Risk Responses and Control Risks in PMBOK.

Ways of resolving negative risks (threats)

StrategyMeaningExample
AvoidChange the plan to eliminate the riskUse proven technology instead of an untested one
MitigateReduce probability or impactPrototype early, train staff
TransferShift impact to a third partyInsurance, fixed-price contract, warranty
Accept (active or passive)Keep the risk, maybe with contingency reserveDocument and set aside reserve

Steps of resolution

  1. Select the risk (from the prioritised risk register).
  2. Develop response options and evaluate their cost versus benefit.
  3. Choose the best response and prepare contingency plan (if risk event occurs) and fallback plan (if contingency fails).
  4. Assign an owner, set triggers and funds.
  5. Implement the response; update the schedule, cost and contracts.
  6. Monitor residual risks and secondary risks.
  7. Close the risk when it is no longer relevant.
Risk -> Choose strategy -> Plan (owner, cost, trigger)
     -> Implement -> Monitor residual risk -> Close

Key terms

  • Residual risk: remains after response.
  • Secondary risk: new risk caused by the response.
  • Risk trigger: warning sign.
  • Workaround: unplanned response to an unidentified risk that occurred.

Example: Risk of server failure. Resolution: mitigate by adding a backup server (cost Rs 1 lakh), transfer part via AMC contract, and keep a contingency plan to shift to the cloud if both fail.

✓ Answer checked by Claude Opus 5.5 (high effort)

All ICT Project Management chapter 12 questions →