Challenge Your Exam Readiness With Our Free CAPM Practice Questions

Risk avoidance changes the plan to eliminate the threat or protect the project from its impact. Replacing a risky custom algorithm with a certified module removes the hazardous activity, thereby avoiding the regulatory non-compliance risk altogether. Mitigation (Option A) would reduce probability or impact (e.g., more testing, fail-safes) but still proceed. Transfer (Option B) shifts financial consequences (e.g., insurance, fixed-price contracts) but does not remove the underlying technical risk. Acceptance (Option D) acknowledges the risk with minimal action beyond reserves or monitoring. CAPM risk management stresses selecting responses aligned with risk appetite, cost-benefit, and constraints. Avoidance often affects scope, cost, or schedule and thus requires integrated change control and stakeholder alignment. Even when avoiding, add secondary risks to the register (e.g., vendor lock-in, integration constraints, licensing limits) and define validation steps to confirm the new module meets performance and security NFRs. Clear traceability supports audits and formal acceptance, especially in regulated domains.