Browse PMP Full Exam Guide

PMP Distinguishing Risks from Issues and Updating Responses

Study PMP Distinguishing Risks from Issues and Updating Responses: key concepts, common traps, and exam decision cues.

Risks versus issues matter because the project uses different control logic for potential problems and current problems. PMP questions in this area usually test whether the project manager can distinguish the two clearly and update records and responses appropriately when an issue emerges from a tracked risk.

Risks and Issues Need Different Management

A risk is uncertain and future-oriented. An issue is current and present-oriented. That difference affects:

  • how the item is tracked
  • what kind of owner is needed
  • whether monitoring or immediate action is appropriate
  • whether contingency planning or direct resolution is required

The stronger exam answer usually gets this distinction right quickly and does not leave the project in the wrong management mode.

    flowchart TD
	    A["Potential future event"] --> B["Manage as risk with monitoring and planned responses"]
	    B --> C["If event occurs or impact becomes current"]
	    C --> D["Manage as issue with active resolution and updated records"]

Update Both Views When Needed

When a risk becomes an issue, the project manager may need to:

  • open or update the issue record
  • assign issue ownership
  • begin active response
  • update the risk record to show materialization or residual exposure
  • adjust related response plans based on what was learned

The stronger response usually avoids pretending that the issue fully replaces risk thinking. The project may still have residual risk, secondary risks, or lessons that affect other monitored items.

Misclassification Weakens Control

If the team calls a live issue a risk, the response may be too passive. If the team treats every uncertain possibility as an issue, the project may overreact and lose focus. The PMP exam often rewards candidates who can classify the condition accurately before choosing the response path.

Example

A project has a known risk that user-acceptance criteria may be incomplete. Later, testing reveals that criteria are indeed missing and work is blocked. The stronger response is to manage the current blockage as an issue, update the risk record to reflect what happened, and adjust similar risk responses elsewhere if the lesson applies.

Common Pitfalls

  • Using risk language for a current problem.
  • Treating all uncertainty as if it already needs issue escalation.
  • Failing to update the risk view after the issue occurs.
  • Losing lessons learned because the project shifts records without connecting them.

Check Your Understanding

### What is the strongest distinction between a risk and an issue? - [ ] A risk belongs to the sponsor and an issue belongs to the team - [x] A risk is a possible future event; an issue is a current problem requiring active management - [ ] A risk is always minor and an issue is always major - [ ] A risk is never documented once an issue exists > **Explanation:** The key difference is potential versus present impact. ### What is the strongest response when a tracked risk has now occurred and is affecting delivery? - [ ] Keep it only in the risk register and continue monitoring - [ ] Delete the risk history immediately - [x] Manage it as an issue while updating related risk records and responses appropriately - [ ] Treat it as a lesson learned only > **Explanation:** Current impact requires issue management, but related risk information may still need updates. ### Which situation most strongly suggests misclassification? - [ ] A possible supplier delay is being monitored with triggers - [ ] A future compliance concern is tracked in the risk register - [ ] An issue log entry has a defined owner - [x] Testing is currently blocked, but the team keeps calling it only a risk and takes no active issue action > **Explanation:** A current blockage should not remain in passive risk-management mode. ### What is the weakest mindset about risks versus issues? - [x] Assume the same management approach works equally well for both risks and issues - [ ] Shift to active issue response when impact becomes current - [ ] Update both issue and risk views where needed - [ ] Use lessons from a materialized risk to refine related responses > **Explanation:** Risks and issues require different control behaviors.

Sample Exam Question

Scenario: A project has a documented risk that a data-conversion activity may fail because source files are inconsistent. During execution, the conversion actually fails and downstream testing stops. The team updates the risk register but takes no additional action because the matter is already documented there.

Question: What is the strongest first action?

  • A. Continue monitoring the risk because it was already identified
  • B. Manage the situation as an issue, assign ownership and response actions, and update related risk records accordingly
  • C. Remove the item from the risk register and take no further documentation steps
  • D. Wait until testing restarts before deciding whether it is an issue

Best answer: B

Explanation: The strongest answer is B because the risk has already materialized and is now blocking work. That requires issue management, not only risk monitoring. The project manager should also update the related risk information so the records remain accurate and useful.

Why the other options are weaker:

  • A: Monitoring is too passive for an active delivery problem.
  • C: The risk history still matters for traceability and learning.
  • D: The issue is already current and needs immediate handling.

Key Terms

  • Risk: A possible future event that may affect project objectives.
  • Issue: A current problem or condition already affecting the project.
  • Residual risk: Remaining exposure that still exists after a risk materializes or responses are applied.
Revised on Monday, April 27, 2026