Risk and Uncertainty Management

The PMBOK 8th Edition elevates risk management to a core principle (Principle 10: Optimise risk responses) and dedicates an entire performance domain to uncertainty. This reflects the recognition that modern projects operate in environments of increasing ambiguity, complexity, and volatility.

Risk management in PMBOK 8 is proactive rather than reactive. It encompasses both threats (negative risks) and opportunities (positive risks), with the goal of maximising positive impacts while minimising negative ones.

Key Points

• Risk management is both a principle AND a performance domain in PMBOK 8
• Risks include both threats and opportunities
• Overall project risk differs from individual risks — assess the aggregate
• PMBOK 8 distinguishes between uncertainty (known unknowns) and ambiguity
• Risk responses: Avoid, Transfer, Mitigate, Accept (threats); Exploit, Share, Enhance, Accept (opportunities)
• Resilience is a key concept — build the ability to adapt to disruption
• Risk management is continuous, not a one-off activity
• Complexity adds to uncertainty — manage the whole system, not just individual risks

Key Terms & Definitions

Risk

An uncertain event or condition that, if it occurs, has a positive or negative effect on one or more project objectives.

Risk Appetite

The level of risk an organisation is willing to accept in pursuit of its objectives.

Risk Threshold

The level of risk exposure above which risks are addressed and below which risks may be accepted.

Residual Risk

The risk that remains after risk responses have been implemented.

Secondary Risk

A risk that arises as a direct result of implementing a risk response.

Ambiguity

A state of being unclear about what is unknown, including lack of clarity about what might happen.