Risk Monitoring and Reassessment

Introduction
Risk Monitoring and Reassessment is the continuous process of tracking identified risks, watching residual and secondary risks, identifying new risks, checking whether risk responses are working, and judging how effective the risk management process is across the whole construction project life cycle. In the PMI Construction Professional (PMI-CP) framework, it is not a one-time activity. It is an ongoing discipline that keeps the risk register alive and relevant from preconstruction through closeout.

Why Risk Monitoring and Reassessment Is Important
Construction projects are dynamic. Site conditions, weather, labor availability, material prices, regulations, design changes, and stakeholder expectations change constantly. A risk register built during planning can become outdated within weeks. Monitoring and reassessment matters for these reasons:
- Risks evolve: A risk's probability and impact change as the project progresses. For example, foundation risks fade once substructure work is complete, while commissioning risks grow near the end.
- New risks emerge: Unforeseen ground conditions, supply chain disruptions, subcontractor insolvency, or permit delays may appear mid-project.
- Responses can fail or create new risks: A mitigation strategy may be ineffective, or it may trigger secondary risks. For example, accelerating work to recover the schedule increases safety risk.
- Contingency management: Monitoring shows whether contingency and management reserves are enough or are being used up too fast.
- Stakeholder confidence: Owners, lenders, and regulators expect transparent, current risk reporting.
- Safety and compliance: In construction, unmonitored risks can lead to injuries, fatalities, environmental harm, and legal liability.
- Claims and disputes avoidance: Early detection of changing conditions supports timely notices, documentation, and fair resolution under the contract.

What It Is
Risk Monitoring and Reassessment covers several core activities:
1. Tracking identified risks: Watching triggers (warning signs) and risk owners' actions.
2. Monitoring residual risks: These are the risks that remain after responses are implemented.
3. Identifying secondary risks: These are risks caused directly by implementing a risk response.
4. Identifying new or emergent risks: Found through site observations, meetings, audits, and data analysis.
5. Reassessing probability and impact: Updating qualitative scores and quantitative models such as Monte Carlo schedule and cost analysis.
6. Evaluating response effectiveness: Asking whether a response worked and whether it should change.
7. Closing risks: Retiring risks that can no longer occur, such as excavation risks after backfill.
8. Updating documentation: Keeping the risk register, risk report, lessons learned, and baselines current through change control when needed.

Key Terms to Know
- Risk trigger: An event or condition that signals a risk is about to occur, such as a supplier missing two delivery dates.
- Risk owner: The person accountable for monitoring a risk and executing its response.
- Residual risk: The risk remaining after a response is applied.
- Secondary risk: A new risk created by a response.
- Workaround: An unplanned response to a risk that has occurred and was not identified or accepted passively.
- Contingency reserve: Budget or time set aside for identified risks (known-unknowns), usually controlled by the project manager.
- Management reserve: Reserve for unidentified risks (unknown-unknowns), usually controlled by senior management or the owner.
- Risk audit: A review of how effective risk responses and the risk management process are.
- Risk reassessment: A scheduled or event-driven review to identify new risks and update existing ones.

How It Works: The Process in Practice
Step 1: Establish a monitoring rhythm. Set risk review frequency in the Risk Management Plan, for example weekly at site coordination meetings and monthly with the owner. Also trigger reviews at milestones, major change orders, phase gates, or significant events such as an incident or a severe weather forecast.

Step 2: Gather work performance data. Use daily reports, inspection results, earned value data (CPI, SPI), schedule updates, RFIs, submittals, change order logs, safety observations, quality nonconformance reports, and procurement status.

Step 3: Analyze using tools and techniques.
- Risk reassessment: Re-score risks and add new ones.
- Risk audits: Check process compliance and response effectiveness.
- Variance and trend analysis: Compare planned and actual performance. Worsening trends may indicate emerging risks.
- Earned value management: A falling CPI or SPI signals cost or schedule risk materializing.
- Technical performance measurement: Check whether installed systems meet specifications, for example concrete strength tests.
- Reserve analysis: Compare remaining contingency against remaining risk exposure.
- Look-ahead schedules: 3 to 6 week look-aheads reveal near-term constraints.
- Meetings: Toolbox talks, coordination meetings, owner-architect-contractor (OAC) meetings.
- Quantitative re-analysis: Update Monte Carlo simulations for completion date and cost confidence levels.

Step 4: Take action. Implement contingency plans when triggers occur. Apply workarounds for unplanned events. Submit change requests when responses affect baselines. Escalate risks outside the project manager's authority to the owner or sponsor.

Step 5: Update and communicate. Update the risk register, risk report, issue log, assumption log, lessons learned register, and stakeholder communications. Use dashboards, heat maps, and top-10 risk lists for clarity.

Step 6: Close out risks. Formally close risks that have passed and release the related contingency according to contract and organizational policy.

Construction-Specific Examples
- Weather: A hurricane season forecast triggers reassessment of exterior envelope work. The response is to accelerate enclosure and secure materials.
- Material escalation: Steel price trends exceed thresholds. The team reviews escalation clauses and considers early procurement.
- Differing site conditions: Unexpected rock is found during excavation. The team issues a contract notice promptly, reassesses schedule risk, and updates the geotechnical risk.
- Subcontractor performance: Repeated manpower shortfalls trigger a review of default risk and possibly a supplementary workforce plan.
- Safety: A near-miss leads to reassessment of crane operations and new controls.

Common Pitfalls
- Treating the risk register as a static document.
- Monitoring only high risks while ignoring watch-list risks that can escalate.
- Failing to assign clear risk owners.
- Not checking for secondary risks created by responses.
- Spending contingency without tracking how it relates to specific risks.
- Missing contractual notice periods for risk events.
- Not capturing lessons learned during the project.

Exam Tips: Answering Questions on Risk Monitoring and Reassessment
1. Look for the proactive, process-driven answer. PMI favors answers where the project manager consults the risk register, evaluates the situation, and follows the risk management plan, rather than reacting impulsively.
2. Know the order of actions. When a risk occurs, first check the risk register for a planned response (contingency plan). If no plan exists, apply a workaround and then update the register. When a new risk is identified, analyze it, plan a response, and update the register.
3. Distinguish risks from issues. A risk is an uncertain future event. An issue has already happened. Issues go in the issue log. A risk that occurs becomes an issue.
4. Residual vs. secondary risk. Residual risk is what remains after a response. Secondary risk is caused by the response. Exams often test this distinction.
5. Contingency vs. management reserve. Identified risks draw on contingency reserve. Unknown risks draw on management reserve, which usually requires sponsor or owner approval.
6. Risk audits vs. reassessments. Audits evaluate how effective the process and responses are. Reassessments identify new risks and update existing ones.
7. Change control applies. If a risk response changes scope, schedule, or cost baselines, the correct answer usually involves submitting a change request through integrated change control.
8. Escalation. If a risk is outside the project's authority or affects the program or portfolio, escalate to the appropriate party and do not just accept it.
9. Watch for EVM clues. A question citing CPI below 1 or SPI below 1 often points to reassessing cost or schedule risks and checking reserve adequacy.
10. Contract awareness in construction. For differing site conditions or delays, look for answers that include timely written notice and documentation according to the contract.
11. Avoid extreme answers. Options like ignoring the risk, immediately stopping all work, or blaming a party are rarely correct unless safety is imminent. Safety-critical situations do justify stopping work.
12. Communicate. After updates, the best answer often includes informing stakeholders according to the communications management plan.
13. Lessons learned are ongoing. Record insights throughout the project, not just at closeout.
14. Read the question stem carefully. Words like FIRST, NEXT, BEST, and MOST LIKELY change the answer. The FIRST action is usually to assess or analyze before acting.

Sample Question
During foundation work, the superintendent reports groundwater levels much higher than shown in the geotechnical report. Dewatering was identified as a risk with a contingency plan. What should the project manager do FIRST?
A) Issue a change order to the owner
B) Implement the contingency plan from the risk register
C) Stop all work on site
D) Hold a brainstorming session to identify new risks
Answer: B. The risk was identified and has a planned response, so the project manager implements the contingency plan. Contract notice and register updates follow.

Summary
Risk Monitoring and Reassessment keeps construction risk management continuous, data-driven, and responsive. It involves tracking triggers, evaluating responses, reassessing exposure, managing reserves, and communicating changes. For the PMI-CP exam, favor answers that follow the plan, use documented tools such as the risk register, audits, EVM, and reserve analysis, respect change control and contract requirements, and keep stakeholders informed.