Question

A project team decides to mitigate a high-priority schedule risk by outsourcing a specialized testing activity to an external vendor. During a subsequent risk review, a team member points out that relying on this vendor introduces a new risk: the vendor could fail to meet the agreed quality standards, which was not present before the mitigation decision. How should the project manager classify and handle this newly identified risk?

Accepted Answer

Treat it as a secondary risk that arose directly from implementing the risk response, and add it to the risk register for analysis and response planning

Answer

Treat it as a residual risk that remains after the response and simply document it as accepted without further action

Answer

Ignore it because the original schedule risk has already been mitigated, satisfying the response objective

Answer

Escalate it immediately to the sponsor as an issue since a vendor is now involved