CAPM Practice: Demonstrate an understanding of project management planning

A risk register documents risks AND their planned responses, but the responses must be executed when appropriate. Identifying a backup vendor was the planned response, but it was never acted upon. The purpose of risk planning is to prepare actions that will be taken if risks occur.

**Why not A:** A 40% probability is significant and should not be dismissed. Risks should remain in the register regardless of whether their probability is above or below 50%. Removing risks based on an arbitrary probability threshold leaves the project exposed to known threats.

**Why not B:** Updating the probability to 100% at the time of initial identification is incorrect because the risk had not yet materialized. The 40% probability was an accurate assessment at that time. The failure was in not executing the response, not in the probability estimate.

**Why not C:** Escalating to the sponsor upon initial identification is not necessarily the correct first step. The risk had a documented response plan (identify backup vendor) that should have been implemented during execution. Escalation was not the planned response.