Describe the risk management process in MDC3 context?

• A. Risk management identifies, assesses, mitigates, and monitors risks; aligns with governance and project priorities in MDC3.
• B. Only documents risks after a failure.
• C. Avoids any risk by not introducing changes.
• D. Only focuses on financial risk.

Answer: (A)

The main concept tested is that risk management is a continual, structured process that starts early and runs throughout the project. It identifies potential risks, assesses their likelihood and impact, decides on mitigation actions, and continuously monitors risks, all while staying aligned with governance and project priorities in MDC3.

In MDC3, risk management isn’t just about documenting problems after something goes wrong. It involves proactively spotting risks across scope, requirements, technology, processes, and people; rating them to prioritize what matters most; choosing and implementing controls to reduce either the chance of occurrence or the impact; and then tracking residual risk over time with defined owners,Mitigation plans, and escalation paths. Regularly reporting to governance bodies ensures decisions reflect the organization’s risk tolerance and the project’s objectives, and plans are updated as conditions change.

The other statements miss essential elements: risk management is not a post-mailure activity, it does not aim to avoid all risk by avoiding change, and it covers more than just financial risk. The best approach is the full lifecycle that integrates governance and project priorities.