Back to Opportunities & Threats - PMBOK 7th edition

Secondary Risks

5 minutes 5 Questions

Secondary risks, also known as residual risks, are the risks that remain after implementing initial risk response strategies. These risks arise as a consequence of the actions taken to address the primary risks identified in the project. While the original risk response measures may mitigate or eliminate the primary risks, they can inadvertently create new risks or alter the project's risk landscape. For example, if a project team decides to outsource a critical component to mitigate the risk of internal development delays, this decision might introduce new risks related to vendor management, communication, or quality control. Secondary risks can be both threats and opportunities, depending on the nature of the initial risk response and its outcomes. Identifying and assessing secondary risks is an important aspect of comprehensive risk management. Project managers should consider the potential unintended consequences of their risk response strategies and develop contingency plans to address any resulting secondary risks. This iterative process of identifying, analyzing, and responding to risks helps maintain a holistic view of the project's risk profile. By anticipating and managing secondary risks, project managers can minimize the overall impact of risks on project objectives and ensure a more robust and resilient project delivery.

Secondary Risks in PMBOK Guide 7th Edition

Secondary risks are risks that arise as a direct result of implementing a risk response. It is important to consider secondary risks when planning risk responses because they can introduce new threats or opportunities to the project that must be addressed.

What are Secondary Risks?
Secondary risks are unintended consequences or new risks that emerge from implementing a risk response. For example, if the risk response is to add more resources to the project to mitigate a schedule risk, a secondary risk could be the increased cost associated with those additional resources.

Why are Secondary Risks Important?
Identifying and analyzing secondary risks is crucial because they can impact the project's objectives, such as scope, schedule, cost, and quality. By considering secondary risks during risk response planning, project managers can develop a more comprehensive risk management strategy and avoid unintended consequences.

How to Manage Secondary Risks:
1. Identify potential secondary risks when planning risk responses.
2. Analyze the impact and probability of secondary risks.
3. Develop risk responses for significant secondary risks.
4. Monitor and control secondary risks throughout the project.
5. Communicate secondary risks to stakeholders and team members.

Exam Tips: Answering Questions on Secondary Risks
1. Read the question carefully and identify the primary risk and the proposed risk response.
2. Consider potential unintended consequences or new risks that may arise from implementing the risk response.
3. Evaluate the impact and probability of the secondary risks on project objectives.
4. Choose the most appropriate answer that demonstrates an understanding of secondary risks and their management.
5. Remember that not all risk responses will have significant secondary risks, but it is important to consider them in the risk management process.

Test mode:
Start practice test
PMP - Opportunities & Threats - PMBOK 7th edition Example Questions

Test your knowledge of Amazon Simple Storage Service (S3)

Question 1

Which of the following is a key consideration when managing secondary risks in a project?

Correct Answer: Evaluating the potential impact of risk responses on project objectives

The key consideration when managing secondary risks in a project is evaluating the potential impact of risk responses on project objectives. Risk responses themselves can introduce new risks or have unintended consequences that affect the project's objectives. It is essential to assess these potential side effects to ensure that the risk response strategies do not inadvertently create more problems than they solve. Focusing solely on primary risks and their consequences overlooks the importance of secondary risks arising from risk responses. Implementing risk responses assessing potential side effects can lead to unforeseen issues that jeopardize project success. Prioritizing secondary risks over primary risks during risk management planning fails to address the root causes of project risks adequately.

Question 2

What are the risks that arise as a direct result of implementing risk responses?

Correct Answer: Secondary risks

Secondary risks are the correct answer. These are the risks that arise as a direct result of implementing risk responses. Residual risks are risks that remain after implementing risk responses, but they are not a direct result of implementing the risk responses themselves. Risks identified during the risk identification process are not necessarily a result of implementing risk responses. They are risks that have been identified in general. Risks with low probability but high impact are also not a direct result of implementing risk responses. They are a type of risk that may be identified during risk analysis, but they do not arise from implementing risk responses.

Question 3

Which of the following statements best describes secondary risks in project management?

Correct Answer: Secondary risks are risks that arise as a result of implementing risk responses to primary risks

The correct answer is that secondary risks are risks that arise as a result of implementing risk responses to primary risks. This statement accurately describes the concept of secondary risks in project management. When a project team identifies primary risks and develops risk response strategies, the implementation of those strategies may inadvertently create new risks, known as secondary risks. The other answer options are incorrect because: - Secondary risks are not merely lower priority risks that can be addressed later in the project lifecycle. They are a distinct category of risks that emerge from the implementation of risk responses. - Secondary risks are not identified during the initial risk assessment process. They arise later, as a consequence of implementing risk responses. - While secondary risks may have an indirect impact on project objectives, this is not the defining characteristic. The key aspect is that they are triggered by the implementation of risk responses to primary risks.

Go Premium

Project Management Professional Preparation Package (2024)

  • Earn 35 PDUs needed for your PMP certification
  • 9524 Superior-grade Project Management Professional practice questions.
  • Accelerated Mastery: Deep dive into critical topics to fast-track your mastery.
  • Unlock Effortless PMP preparation: 5 full exams.
  • 100% Satisfaction Guaranteed: Full refund with no questions if unsatisfied.
  • Bonus: If you upgrade now you get upgraded access to all courses
  • Risk-Free Decision: Start with a 7-day free trial - get premium features at no cost!
More Secondary Risks questions
22 questions (total)
Start 22 question test