CAPM Practice: Determine how to follow and execute planned strategies or frameworks

The risk management plan is a planned strategy that specifies escalation procedures. When a high-impact risk is identified, following the documented process means escalating immediately as planned. This ensures proper governance and timely decision-making.

**Why not A:** Updating the risk register and continuing to monitor is insufficient for a high-impact risk that requires immediate escalation per the risk management plan. Passive monitoring does not meet the documented escalation requirement for this risk category.

**Why not C:** Waiting until the next steering committee meeting delays action on a critical security vulnerability. The risk management plan specifies immediate escalation for high-impact risks, and waiting for a scheduled meeting violates this planned procedure.

**Why not D:** Assigning the team to fix the vulnerability without escalation ignores the governance process documented in the risk management plan. High-impact risks require sponsor awareness and decision-making authority that the project team alone cannot provide.