Which statement best describes risk management in PDD?

• A. Identify hazards, assess likelihood and impact, implement mitigations, and document decisions.
• B. Identify hazards only, with no assessment of likelihood or impact.
• C. Implement mitigations without first assessing risk.
• D. Document decisions without identifying hazards.

Answer: (A)

Risk management in PDD is an integrated process that starts by identifying potential hazards, then evaluating how likely they are and how serious their consequences could be. Based on that assessment, you select and implement mitigations to reduce either the probability or the impact, and you document the decisions and rationale so the team has traceability. This combination—identify, assess, mitigate, and document—ensures you know what could go wrong, how big the risk is, and how you’ll address it, with a record to justify the approach. The other options miss essential parts: identifying hazards alone leaves out likelihood and impact; acting on mitigations without understanding risk can misprioritize efforts; and documenting decisions without identifying hazards fails to show what was being mitigated in the first place.