Question

A project manager implements a risk response by outsourcing a specialized data migration to a third-party vendor to reduce the chance of technical failure. During planning, the team realizes that relying on the vendor introduces a new concern: the vendor may miss the delivery deadline, delaying the project. How should the project manager classify and handle this new concern?

Accepted Answer

As a secondary risk that arises from implementing the response, which should be documented in the risk register and have its own response planned

Answer

As a residual risk that must simply be accepted because no response can eliminate it

Answer

As an issue that should be escalated immediately to the change control board

Answer

As a trigger that indicates the original risk response has already failed