---
reference_type: Performance Domain
reference_id: PD8-07
name: Risk
version: "1.0.0"
status: Active
edition: PMBOK8
pmbok8_source: "PMBOK8 Guide §2.7 — Risk Performance Domain"
authority: PMI-derived
file_path: "reference/performance-domains/PD8-07-risk.md"
last_updated: "2026-06-07"
---

# PD8-07 — Risk Performance Domain
**Type:** Performance Domain  
**Edition:** PMBOK 8th Edition (2025)  
**PMBOK 8 Source:** PMBOK8 Guide §2.7 — Risk Performance Domain  
**Version:** 1.0.0  

## Definition
The **Risk Performance Domain** addresses activities and processes associated with risk and uncertainty (including ambiguity, complexity, and volatility) through systematic identification, analysis, and response across the project lifecycle (PMBOK8 §2.7). It focuses on minimizing threats to project objectives and exploiting opportunities to enhance project value.

## Desired Outcomes
Per PMBOK8 §2.7, effective execution of the Risk Performance Domain results in:
- **Systematic identification** of project risks (both threats and opportunities) throughout the lifecycle.
- **Qualitative and quantitative analysis** of risks, understanding their probability, impact, and urgency.
- **Pragmatic risk response strategies** that are cost-effective, agreed-upon, and owned.
- **Proactive implementation** of risk responses, minimizing negative consequences and capturing benefits.
- **Continuous monitoring of the risk landscape**, adapting risk registers and reserve levels to changing conditions.

## Key Processes and Activities
This domain encompasses the following 6 canonical processes (PMBOK8 §2.7.2):
1. **Plan Risk Management** (§2.7.2.1) — Defines how to conduct risk management activities for a project.
2. **Identify Risks** (§2.7.2.2) — Identifies individual project risks as well as sources of overall project risk, documenting their characteristics.
3. **Perform Risk Analysis** (§2.7.2.3) — Performs qualitative risk analysis (prioritizing risks by probability/impact) and/or quantitative risk analysis (modeling overall project risk exposure).
4. **Plan Risk Responses** (§2.7.2.4) — Develops options, selects strategies, and agrees on actions to address overall project risk exposure and treat individual risks.
5. **Implement Risk Responses** (§2.7.2.5) — Implements agreed-upon risk response plans.
6. **Monitor Risks** (§2.7.2.6) — Monitors implementation of risk response plans, tracks identified risks, identifies and analyzes new risks, and evaluates risk process effectiveness.

## Relationship to Principles
| Principle | Connection |
|---|---|
| P8-01 — Holistic View | Risk exists across all domains; holistic thinking prevents blind spots and addresses cross-domain cascading risks (§3.3.3). |
| P8-02 — Focus on Value | Risk management protects value and targets opportunities that can enhance strategic return on investment (§3.4.3). |
| P8-03 — Embed Quality | Encompasses the proactive management of quality-related risks, preventing defects and compliance failures (§3.5.3). |
| P8-05 — Integrate Sustainability | Sustainability risks (social, regulatory, environmental, reputational) require active identification and management (§3.7.1). |

## Artifact Connections
| Artifact | Connection |
|---|---|
| A19 — Risk Management Record (Risk Register) | The central database documenting identified risks, owners, analysis, and response plans. |
| A20 — Quantitative Risk Reserve Decision Record | Documents the contingency reserve allocations based on quantitative simulations. |
| A18 — Issue, Impediment, and Action Log | Tracks realized risks (issues) and details immediate resolution actions. |

## Skill Connections
| Skill ID | Skill Name | Connection |
|---|---|---|
| SKL-03-14 | Plan and Manage Project Risks | Establishes the risk approach, leads risk workshops, and defines registers. |
| SKL-03-15 | Perform Quantitative Risk Analysis | Conducts simulations (e.g., Monte Carlo) to estimate budget/schedule reserves. |
| SKL-05-08 | Monitor and Control Project Risks | Regularly updates the risk register, tracks metrics, and manages triggers. |

## Questions to Ask in Practice
1. Are we identifying opportunities (positive risks) as actively as we are identifying threats (negative risks)?
2. Do we have clearly assigned owners for every key risk, and are they authorized to implement responses?
3. How are we checking if our risk responses are actually effective, or are we just checking off activities?
4. Are overall project risks (e.g., environmental, political, or economic volatility) being evaluated alongside task-level risks?

*Authority: PMBOK8 Guide §2.7 — Risk Performance Domain · Source type: PMI-derived*
*Repository: https://github.com/fakhruldeen/PMOSkills*
