Project Management Professional (PMP) — Question 1166

A company has an existing contract to maintain and enhance a client's customer database. The company's legal department informs the project manager that a new piece of legislature requiring stricter protection of customer information might soon be signed into law. The law will require additional security features to be implemented into the database the project manager is maintaining. These features are not included in the scope of the current contract.

What should the project manager do?

Answer options

• A. Update the risk register to include this issue and discuss the appropriate risk response plans with the project sponsor and client.
• B. Ask the legal department to raise the issue in the next contract negotiation with the customer.
• C. Seek the project sponsor's support to influence the client to amend the contract immediately.
• D. Wait until the legal requirements are finalized so the change in scope can be concretely defined.

Correct answer: A

Explanation

The correct answer, A, is appropriate because updating the risk register allows for proactive management of potential issues while engaging stakeholders. Option B is not ideal as it delays immediate action, and C may pressure the client unnecessarily. Option D is risky as it does not address potential compliance issues until it's too late.