Project Risk Management Cheat Sheet 2026

The 30 highest-yield Project Risk Management facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which term describes a risk that can benefit multiple projects if it occurs? → Shared risk
2. Which tool is commonly used for root cause analysis in Project Risk Management quality management? → Fishbone (Ishikawa) diagram to identify contributing factors systematically
3. A Pareto chart reveals that 3 defect types account for 78% of all quality failures. What is the recommended project management response? → Focus corrective action on the 3 dominant defect types first
4. What is the expected monetary value (EMV) of a risk with a 30% probability of occurring and an impact of -$50,000? → -$15,000
5. A risk response strategy results in the creation of a new risk. What must the project manager do? → Document and analyze the new secondary risk and plan appropriate responses
6. In quantitative risk analysis, what is the key difference between a risk's 'probability' and its 'impact'? → Probability is the likelihood of occurrence; impact is the consequence if it occurs
7. A project's risk register includes: 'Probability: 0.4, Impact: $50,000.' What is the Expected Monetary Value (EMV) of this risk? → $20,000
8. A project's risk exposure has significantly increased due to scope changes. Which action should the project manager take? → Perform an unscheduled risk reassessment immediately
9. The risk register is updated after risk response planning to include: → Agreed-upon responses, risk owners, and residual and secondary risks
10. What is the purpose of a 'risk breakdown structure' (RBS)? → To hierarchically categorize risk sources for comprehensive identification
11. Which risk is MOST associated with adopting an AI-powered decision-support tool in a project management context? → Algorithmic bias leading to flawed risk prioritization
12. Which action best demonstrates closing the loop on risk communication after a risk response is implemented? → Reporting the response outcome and residual risk status to stakeholders
13. Which output of the Monitor Risks process can result in change requests to the project management plan? → Recommended corrective or preventive actions
14. In a risk probability and impact matrix, a risk falls in a 'yellow' zone. What does this typically indicate? → The risk requires monitoring and may need a response plan
15. A software project relies on a legacy database that is incompatible with the new application stack. The risk register should include this as a: → Technical constraint risk
16. Which of the following is NOT a typical input to the Perform Qualitative Risk Analysis process? → Project schedule network diagram
17. A project team identifies that a vendor delay could push the schedule out by two weeks. They add an extra two weeks to the project plan. This is an example of: → Contingency reserve
18. What is the role of lessons learned in risk communication? → To share risk outcomes and response effectiveness for future project benefit
19. What does 'residual risk' refer to in project risk management? → Risk remaining after responses have been implemented
20. What is the relationship between the risk management plan and the risk register? → The risk management plan defines how the risk register will be structured and maintained
21. On a control chart, seven consecutive data points all fall on the same side of the mean. What does this pattern indicate? → A non-random pattern suggesting the process may be out of control
22. How often should risk information be communicated to stakeholders according to best practices? → At regular, predefined intervals aligned with project reporting cycles
23. Which of the following scenarios represents an appropriate use of management reserves in risk monitoring? → Funding responses to unknown-unknown risks that materialize
24. What is the purpose of a risk communication plan within a project? → To define who receives what risk information, when, and through which channel
25. When should a project manager escalate a risk to executive leadership? → When the risk exceeds the project's risk threshold or tolerance level
26. What is 'risk urgency assessment' used for during Perform Qualitative Risk Analysis? → Identifying which risks require near-term responses
27. A previously identified risk has now occurred on the project. What does this risk become in project management terminology? → An issue
28. Which statement about Monte Carlo simulation iterations is correct? → More iterations produce a more stable and reliable output distribution
29. What is the PRIMARY output of the Identify Risks process according to the PMBOK Guide? → Risk register
30. Which of the following is a key objective of the Perform Qualitative Risk Analysis process? → To prioritize identified individual project risks for subsequent analysis or action.