Risk handling strategies should be reviewed and revised periodically to ensure they remain effective and relevant as the project progresses. This allows the project manager to adapt to changing circumstances and minimize the impact of risks on the project.
According to the PMBOK® Guide, risk handling strategies are the specific actions that are taken to implement the risk response plan. The risk response plan is the output of the Plan Risk Responses process, which describes how the project team intends to address the identified risks. The risk handling strategies should be aligned with the risk response strategies, which are the general approaches to deal with the risks, such as avoid, transfer, mitigate, accept, exploit, share, enhance, or accept.
The project manager should work with the risk handling strategies by reviewing and revising them periodically. This is because the project risks are not static, but dynamic and uncertain. They may change over time due to various factors, such as changes in the project scope, schedule, cost, quality, resources, stakeholder expectations, assumptions, constraints, etc. Therefore, the project manager should monitor and control the risk handling strategies to ensure that they are still effective and appropriate for the current risk situation. The project manager should also update the risk register and the risk report with the results of the risk handling strategies, such as the residual risks, secondary risks, and risk triggers.
The other options are not valid for how the project manager should work with the risk handling strategies:
Implement the strategies after completing the risk analysis: This is not a valid option because the risk analysis is not the final step in the risk management process. The risk analysis is part of the Perform Qualitative Risk Analysis and Perform Quantitative Risk Analysis processes, which come after the Identify Risks process and before the Plan Risk Responses process. The risk analysis helps the project manager to prioritize and evaluate the risks, but it does not provide the specific actions to address them. The risk handling strategies are developed in the Plan Risk Responses process, which comes after the risk analysis.
Implement the strategies immediately: This is not a valid option because the risk handling strategies should not be implemented without proper planning and approval. The risk handling strategies should be documented in the risk response plan, which should be communicated and approved by the project sponsor, customer, and other relevant stakeholders. The risk handling strategies should also be integrated with the other project management plans, such as the scope, schedule, cost, quality, resource, communication, procurement, and stakeholder management plans. The risk handling strategies should be implemented only when the risk triggers or conditions occur, or when the project manager decides to do so based on the risk analysis and evaluation.
Ensure the strategies are approved by the stakeholders: This is not a valid option because the approval of the risk handling strategies is not the only thing that the project manager should do with them. The approval of the risk handling strategies is part of the Plan Risk Responses process, which comes before the Implement Risk Responses and Monitor Risks processes. The project manager should also implement, monitor, and control the risk handling strategies to ensure that they are effective and appropriate for the current risk situation.
References: PMBOK® Guide1, Risk Management Professional (PMI-RMP)® Cert Guide1
