21.3 Proactive and Reactive Risk Responses

APM Project Management Qualification PMQ

Track your progress as you read

Finished sections get a check mark.

1 Introduction & Exam Overview

1.1 Current Exam Facts 1.2 Exam Format & Question Types 1.3 How to Study for APM PMQ

2 Life Cycles

2.1 Linear Life Cycles and Why Work Is Phased 2.2 Iterative and Hybrid Life Cycles 2.3 Project Life Cycles and Extended Life Cycles 2.4 Choosing a Life Cycle: Context, Culture, Strengths and Limitations

3 Governance Arrangements

3.1 Functional, Matrix and Projectised Structures 3.2 Governance Frameworks, Policies and Delegated Responsibility 3.3 Life-Cycle Impact on Governance and Limits of Financial Authority 3.4 Project Roles and Responsibilities 3.5 Project Manager and Project Sponsor Through the Life Cycle 3.6 Linking Projects to Organisational Objectives

4 Sustainability

4.1 Sustainability Responsibilities, Principles and Impact 4.2 Monitoring and Reporting Sustainability Measures

5 Business Case

5.1 Business Case Fundamentals and Analysis Tools 5.2 The Business Case as Baseline and Reviewing Change

6 Procurement

6.1 Procurement Strategy: Purpose and Contents 6.2 Supplier Selection and Negotiation 6.3 Features of Different Contractual Relationships 6.4 Supplier Reimbursement Methods

7 Reviews & Assurance

7.1 Reviews, Decision Gates, Benefits Reviews and Audits 7.2 What Gets Reported and Informing Decisions 7.3 Why Activities Are Re-Planned After a Review 7.4 Project Assurance

8 Transition & Benefits Management

8.1 Transition Requirements and Business-as-Usual Readiness 8.2 Knowledge Transfer and Agreeing the Transition Plan 8.3 Benefits Management: Identification to Realisation 8.4 Aligning and Communicating Benefits

9 Stakeholder Engagement & Communication

9.1 Stakeholder Analysis, Influence and Engagement 9.2 The Communication Management Plan and Its Benefits 9.3 Managing Stakeholder Expectations 9.4 Communication Methods and Tailoring the Message 9.5 Factors That Help and Hinder Communication

10 Conflict Resolution

10.1 Sources and Impacts of Conflict 10.2 Addressing Conflict and the Thomas-Kilmann Model

11 Leadership

11.1 Leadership, Motivation and Team Performance 11.2 Changing Leadership Styles for the Situation 11.3 Coaching, Mentoring and Emotional Intelligence

12 Team Management

12.1 Team Development Stages and Models 12.2 Characteristics and Benefits of Effective Teams 12.3 Leading Virtual and Hybrid Teams

13 Diversity & Inclusion

13.1 Diversity Characteristics and the Equality Act 13.2 Incorporating Diversity and Diverse Thinking 13.3 Conscious and Unconscious Bias and Fair Treatment

14 Ethics, Compliance & Professionalism

14.1 Continuing Professional Development and Competence 14.2 Sources of Specialist Advice and Standards 14.3 The Legal and Regulatory Landscape

15 Requirements & Solutions

15.1 Establishing Scope Through Requirements Management 15.2 Managing Scope Through Configuration Management 15.3 Solutions Development and Prioritisation

16 Quality Management

16.1 Quality Planning, Indicators and the Business Case 16.2 Quality Control and Success Criteria

17 Integrated Planning

17.1 The Integrated Project Management Plan: Format and Contents 17.2 Why an Integrated Plan Matters

18 Schedule Management

18.1 Defining Scope and Breakdown Structures 18.2 Dependencies and What Drives the Schedule 18.3 Re-Estimating and Schedule Optimisation

19 Resource Management

19.1 Determining Resource Requirements and Availability 19.2 Organisational Breakdown Structure and RACI 19.3 Categorising and Allocating Resources 19.4 Resource Smoothing and Resource Levelling

20 Budgeting & Cost Control

20.1 Creating a Budget and Cost Types 20.2 Earned Value and Cost Forecasting 20.3 Monitoring and Reporting Financial Performance 20.4 Closing Down Project Finances

21 Risk & Issue Management

21.1 Benefits of Risk and Issue Management and Contingency Planning 21.2 The Risk and Issue Management Processes 21.3 Proactive and Reactive Risk Responses 21.4 Governance in Risk and Issue Management

22 Change Control

22.1 The Change Control Process and Its Stages 22.2 What a Change Request Must Capture 22.3 Assessing Options and the Impact of a Change 22.4 Recommending Decisions and Updating Plans

Free exam prep APM Project Management Qualification (PMQ) Practice Questions 135 questions Study Guide 74 topics

21.3 Proactive and Reactive Risk Responses

Key Takeaways Explain This Topic AI

Threat responses are avoid, reduce, transfer, and accept; opportunity responses mirror them as exploit, enhance, share, and reject.

Avoid removes the exposure entirely, usually by changing the approach; reduce lowers probability or impact without eliminating it.

Transfer moves the financial consequence to another party through insurance or contract, but it does not remove the project’s accountability for the outcome.

Residual risk is what remains after a response has been applied; secondary risk is new risk introduced by the response itself.

Accepting a risk is a legitimate, deliberate decision when the cost of response exceeds the exposure — provided it is recorded and contingency is held where appropriate. Last updated: August 2026

Outcome 23c names eight responses in two sets: for threats, avoid, reduce, transfer or accept ; for opportunities, exploit, enhance, share or reject . Learn them as matched pairs — the opportunity set mirrors the threat set — and be ready to justify a choice against a scenario rather than simply listing all eight. Proactive and Reactive Responses Once risks are identified and analysed, the project must respond . The syllabus distinguishes proactive and reactive approaches: Proactive responses act now to change the probability and/or impact of a risk before it occurs (or to make an opportunity more likely / more valuable). Reactive (contingent) responses are pre-planned actions that run if a trigger occurs — fallback plans, contingency draw-down, and issue-style recovery. Both are legitimate. Mature plans often combine them: reduce probability proactively, and hold a contingent response plus contingency reserve for residual exposure. Doing nothing until crisis is not a professional "accept" decision unless acceptance was conscious , documented, and within risk appetite . Threat Response Strategies For threats (negative uncertain events), standard strategies are avoid, reduce, transfer, accept .

Strategy Intent Typical actions Example Avoid Remove the threat by changing the plan so the risk cannot occur (or cannot affect objectives) Descope, change method, choose different supplier/route, remove dependency Cancel night-time roof work in storm season; redesign to eliminate a hazardous process Reduce Lower probability and/or impact to an acceptable level Extra testing, training, dual path, early trials, quality gates, buffers Cross-train a second engineer before commissioning; prototype a high-risk interface early Transfer Shift ownership of impact (often commercial/insurance) to a party better able to manage it Contract clauses, insurance, performance bonds, outsourcing a specialist package Fixed-price package for well-defined works; professional indemnity for design risk Accept Consciously retain the threat because treatment is not cost-effective or possible Document residual risk; set monitoring triggers; fund contingency; escalate if needed Accept low-probability force-majeure residual after insurance and contractual treatment Important nuances Transfer does not delete risk for the project. Reputation, benefits delay, and stakeholder impact often remain with the organisation even if cost risk sits with a supplier. Accept is active governance , not silence. Passive hope is unmanaged risk. Avoid may cost scope or time; the sponsor must agree if business value changes. Reduce (sometimes called mitigation in other guides) is the most common day-to-day strategy and should be proportionate to exposure. Scenario — threat responses compared A data centre cutover faces a threat that power failover testing fails on the night of go-live. Avoid: delay go-live until a full parallel run in a non-live window is completed (plan change). Reduce: run partial failover tests weekly; add monitoring; rehearse rollback. Transfer: contract a specialist facilities firm with liquidated damages for test failure (cost impact partly commercial — service downtime risk may remain). Accept: if residual probability is low after reduce, hold a contingent rollback plan and time contingency; monitor trigger metrics. Opportunity Response Strategies Risk management also pursues opportunities (positive uncertain events). Strategies: exploit, enhance, share, reject .

Strategy Intent Typical actions Example Exploit Make the opportunity certain (or as certain as practical) Assign best resources, re-plan to capture it, secure commitments Secure exclusive early access to a shared tool and plan its use so early finish becomes the baseline path Enhance Increase probability and/or positive impact Invest in enablers, early engagement, partial pilots Fund a short spike that improves chance of regulatory fast-track approval Share Allocate opportunity to a party best able to capture it, often with gain-share Partnering, joint ventures, incentivised contracts Target-cost contract with share of savings if early completion increases benefit Reject Consciously not pursue the opportunity Document decision; free capacity for higher priorities Decline optional feature that distracts from critical path benefits Exam trap: Managing only threats. APM treats opportunities as part of risk management; long-response answers that ignore upside miss marks when the scenario offers a clear positive uncertainty. Scenario — opportunity Another programme will free a test environment two weeks early. Exploit by resequencing testing and booking the environment immediately. Enhance by adding a small integration team to maximise use of the window. Share by co-funding environment support with the other programme under a memorandum that both gain schedule. Reject if using it would pull critical staff off a regulatory deadline with higher strategic value. Residual Risk and Secondary Risk Every serious response leaves a trail that examiners love to test.

Concept Meaning Management implication Residual risk Exposure remaining after planned responses Must be re-analysed, accepted within appetite, covered by contingency/monitoring, or escalated Secondary risk A new risk created by implementing a response Must be identified, analysed, and treated like any other risk Example: Transferring ground-risk to a contractor via fixed price may leave residual programme risk if disputes delay the site, and create a secondary risk of adversarial claims behaviour if the specification is ambiguous. Reducing schedule risk by crashing work may create secondary quality and safety risks. Always close the loop: response → residual assessment → secondary scan → update register → report if residual exceeds tolerance. Contingency in Response Planning Contingency is the practical companion of accept and of residual risk after reduce/transfer . Size contingency from analysis (not gut feel alone). Link draw-down to triggers and owners . Report use so boards see whether residual risk is crystallising. Distinguish contingency for identified risks from management reserve or pure estimating allowance where the organisation uses those terms. When contingency is exhausted, that is a governance signal: re-analyse exposure, re-plan, or escalate — do not hide overruns in unrelated budgets.

Test Your Knowledge

A project faces a threat that a single scarce specialist may be unavailable at commissioning. Which action best illustrates a reduce response?

Delete the risk from the register to simplify reporting

Cross-train a second engineer and complete knowledge transfer before commissioning

Hope the specialist remains available and take no action

Increase the benefits target without changing resource plans Check Answer Need a hint? AI

Test Your Knowledge

A risk workshop finds a chance to finish a work package early if another team shares a new tool. Which opportunity response best fits making the positive outcome as certain as practical?

Reject all opportunities because only threats belong in risk management

Transfer the opportunity by ignoring it until after project closure

Accept the threat of early finish by removing it from the plan

Exploit the opportunity by securing tool access and re-planning work to use it Check Answer Need a hint? AI

Sections you finish are checked off in the contents.

Up Next 21.4 Governance in Risk and Issue Management Continue learning

Independent exam preparation notice OpenExamPrep is an independent education provider, not affiliated with or endorsed by the exam sponsors named on this site. Exam and certification names identify what our resources help you study for; they do not imply sponsorship, approval, or review of our materials. Unless a resource expressly identifies authorized public material, our practice questions are independently developed simulations, not actual, recalled, or sponsor-provided exam items. We aim to reflect publicly available exam outlines and topic information in our study resources. Coverage, format, and difficulty may differ from the actual exam, and we cannot guarantee that every detail is accurate or current. Confirm exam requirements, fees, and policies with the official exam sponsor.