Certified in Risk and Information Systems Control (CRISC) — Question 495

You are the project manager of a HGT project that has recently finished the final compilation process. The project customer has signed off on the project completion and you have to do few administrative closure activities. In the project, there were several large risks that could have wrecked the project but you and your project team found some new methods to resolve the risks without affecting the project costs or project completion date. What should you do with the risk responses that you have identified during the project's monitoring and controlling process?

Answer options

• A. Include the responses in the project management plan.
• B. Include the risk responses in the risk management plan.
• C. Include the risk responses in the organization's lessons learned database.
• D. Nothing. The risk responses are included in the project's risk register already.

Correct answer: C

Explanation

The correct answer is C because documenting the risk responses in the organization's lessons learned database helps future projects benefit from the insights gained. Option A is incorrect as the project management plan may not be the appropriate place for this information. Option B is also wrong since the risk management plan is more focused on planning and not on documenting lessons learned. Option D is incorrect because while the risk register contains details about risks, documenting lessons learned provides broader organizational knowledge.