Study guide
21.4 Governance in Risk and Issue Management
APM Project Management Qualification PMQ
Track your progress as you read
Finished sections get a check mark.
1 Introduction & Exam Overview
1.1 Current Exam Facts 1.2 Exam Format & Question Types 1.3 How to Study for APM PMQ
2 Life Cycles
2.1 Linear Life Cycles and Why Work Is Phased 2.2 Iterative and Hybrid Life Cycles 2.3 Project Life Cycles and Extended Life Cycles 2.4 Choosing a Life Cycle: Context, Culture, Strengths and Limitations
3 Governance Arrangements
3.1 Functional, Matrix and Projectised Structures 3.2 Governance Frameworks, Policies and Delegated Responsibility 3.3 Life-Cycle Impact on Governance and Limits of Financial Authority 3.4 Project Roles and Responsibilities 3.5 Project Manager and Project Sponsor Through the Life Cycle 3.6 Linking Projects to Organisational Objectives
4 Sustainability
4.1 Sustainability Responsibilities, Principles and Impact 4.2 Monitoring and Reporting Sustainability Measures
5 Business Case
5.1 Business Case Fundamentals and Analysis Tools 5.2 The Business Case as Baseline and Reviewing Change
6 Procurement
6.1 Procurement Strategy: Purpose and Contents 6.2 Supplier Selection and Negotiation 6.3 Features of Different Contractual Relationships 6.4 Supplier Reimbursement Methods
7 Reviews & Assurance
7.1 Reviews, Decision Gates, Benefits Reviews and Audits 7.2 What Gets Reported and Informing Decisions 7.3 Why Activities Are Re-Planned After a Review 7.4 Project Assurance
8 Transition & Benefits Management
8.1 Transition Requirements and Business-as-Usual Readiness 8.2 Knowledge Transfer and Agreeing the Transition Plan 8.3 Benefits Management: Identification to Realisation 8.4 Aligning and Communicating Benefits
9 Stakeholder Engagement & Communication
9.1 Stakeholder Analysis, Influence and Engagement 9.2 The Communication Management Plan and Its Benefits 9.3 Managing Stakeholder Expectations 9.4 Communication Methods and Tailoring the Message 9.5 Factors That Help and Hinder Communication
10 Conflict Resolution
10.1 Sources and Impacts of Conflict 10.2 Addressing Conflict and the Thomas-Kilmann Model
11 Leadership
11.1 Leadership, Motivation and Team Performance 11.2 Changing Leadership Styles for the Situation 11.3 Coaching, Mentoring and Emotional Intelligence
12 Team Management
12.1 Team Development Stages and Models 12.2 Characteristics and Benefits of Effective Teams 12.3 Leading Virtual and Hybrid Teams
13 Diversity & Inclusion
13.1 Diversity Characteristics and the Equality Act 13.2 Incorporating Diversity and Diverse Thinking 13.3 Conscious and Unconscious Bias and Fair Treatment
14 Ethics, Compliance & Professionalism
14.1 Continuing Professional Development and Competence 14.2 Sources of Specialist Advice and Standards 14.3 The Legal and Regulatory Landscape
15 Requirements & Solutions
15.1 Establishing Scope Through Requirements Management 15.2 Managing Scope Through Configuration Management 15.3 Solutions Development and Prioritisation
16 Quality Management
16.1 Quality Planning, Indicators and the Business Case 16.2 Quality Control and Success Criteria
17 Integrated Planning
17.1 The Integrated Project Management Plan: Format and Contents 17.2 Why an Integrated Plan Matters
18 Schedule Management
18.1 Defining Scope and Breakdown Structures 18.2 Dependencies and What Drives the Schedule 18.3 Re-Estimating and Schedule Optimisation
19 Resource Management
19.1 Determining Resource Requirements and Availability 19.2 Organisational Breakdown Structure and RACI 19.3 Categorising and Allocating Resources 19.4 Resource Smoothing and Resource Levelling
20 Budgeting & Cost Control
20.1 Creating a Budget and Cost Types 20.2 Earned Value and Cost Forecasting 20.3 Monitoring and Reporting Financial Performance 20.4 Closing Down Project Finances
21 Risk & Issue Management
21.1 Benefits of Risk and Issue Management and Contingency Planning 21.2 The Risk and Issue Management Processes 21.3 Proactive and Reactive Risk Responses 21.4 Governance in Risk and Issue Management
22 Change Control
22.1 The Change Control Process and Its Stages 22.2 What a Change Request Must Capture 22.3 Assessing Options and the Impact of a Change 22.4 Recommending Decisions and Updating Plans
21.4 Governance in Risk and Issue Management
Key Takeaways Explain This Topic AI
Governance sets the risk appetite and tolerances that determine which exposures may be accepted and which must be escalated.
Responses cost money and time, so someone with authority must fund them — a register without funded responses is a list of concerns.
Escalation only works if it reaches a body that can actually decide, which is a governance design question rather than a reporting one.
Independent challenge and assurance stop registers drifting towards optimism, where probabilities are quietly reduced rather than managed.
Transferring risk to a supplier under contract does not remove the need for governance — the organisation retains the consequence of failure even where the cost sits elsewhere.
Last updated: August 2026
Outcome 23d is a single line — understand why governance is important in risk and issue management — and it is the outcome that ties this objective back to Chapter 3. Risk management without governance produces a well-maintained register that changes nothing.
Why Governance Matters in Risk and Issue Management
Governance is the framework of authority and accountability. Without it, risk and issue management becomes a private list on the project manager’s laptop. With it, exposure is controlled in line with organisational risk appetite , delegated authority, and strategic objectives.
Risk governance building blocks
Element Role in control
Risk appetite How much risk the organisation is willing to take in pursuit of objectives; sets what is acceptable residual exposure
Risk owners Individuals accountable for managing specific risks and responses (not always the project manager for every risk)
Project manager Integrates risk process, maintains visibility, ensures responses are planned and monitored within tolerances
Sponsor / board Set appetite context, decide escalated risks, approve contingency beyond PM limits, judge business-case impact
- Escalation thresholds Clear rules for when residual risk or issues must go upward
- Reporting Regular risk/issue status to the level that can act — exception-based for boards
- Assurance Independent check that the process is real, not theatre
- Link to change control Responses and issues that alter baselines follow controlled change
- Escalation and reporting to the board
Escalate when:
Residual threat exceeds appetite or project tolerances (time, cost, benefits, safety, compliance).
A response requires authority above the project manager (funding, major descope, contractual transfer).
An issue blocks progress and cannot be resolved at team level.
Opportunity pursuit would reallocate scarce enterprise resources or change strategic priorities.
Contingency draw-down rules require sponsor/board approval.
Good escalation is timely, evidence-based, and option-led : description, impact on objectives and business case, residual exposure, options with pros/cons, recommendation, and decision needed by when. Poor escalation is late, problem-only, or used to dump routine decisions that sit inside the PM’s authority.
Board reporting should highlight top risks and issues , trend (improving/worsening), residual vs appetite, contingency status, and decisions required — not every low-priority register line.
Issue governance
Issues need equal discipline:
Single log with severity and age (aged issues are a governance smell).
Analysis of impact on objectives, compliance, and stakeholders.
Action owners with deadlines and completion criteria.
Escalation when blockers need senior organisational power (resource priority, supplier default, regulatory interface).
Decision record when the resolution accepts residual damage or triggers change control.
Closure only when actions complete or residual risk is formally accepted and owned.
Scenario — governance in action
A rail signalling project faces a high residual safety-related threat after reduce and transfer responses. Contingency can fund extra testing, but the residual still sits near organisational appetite for passenger-service risk. The project manager must not quietly accept that exposure. Correct path: update analysis, present residual risk and options (delay go-live, further reduce, additional independent assurance), escalate to sponsor and board, obtain a decision aligned to appetite and legal duties, then implement and monitor. That is governance creating safe value — not slowing the project for sport.
Scenario — issue governance
A key interface supplier stops work over a payment dispute. This is an issue . Log and analyse impact on critical path and benefits. Assign commercial and technical actions. If resolution exceeds financial authority or threatens the business case, escalate to the sponsor/board with options (settle, replace supplier, re-sequence). Parallel risks (further insolvency, quality rush after restart) stay under risk owners. Without issue governance, email threads replace decisions and the critical path erodes silently.
Common Exam Traps
Treating transfer as zero residual risk for the organisation.
Confusing accept with ignoring the risk.
Forgetting opportunities and their four strategies.
Ignoring secondary risk created by crashing, outsourcing, or insurance structures.
Assuming iterative teams need no escalation or appetite control.
Reporting every risk equally instead of exception-based board focus.
Closing issues when people are tired of them, not when actions are done.
Answer Pattern for Long-Response Questions
Classify threat/opportunity or issue.
Select a response strategy and justify it against objectives and appetite.
State residual and any secondary risk.
Name owner , monitoring/trigger, and contingency if relevant.
State what escalates to sponsor/board and why governance requires it.
That structure covers LO23(c)–(d): proactive/reactive responses for threats and opportunities, and why governance — appetite, ownership, escalation, and reporting — makes risk and issue management real.