Prince2 header
products page

PRINCE2 - Managing Stage Boundaries (SB) part 5

Updating the Risk Log (SB4)

Fundamental principles

Risks change during the life of a project. New ones arise and old ones change their status. The exposure of the project to risk must be regularly reviewed.


The update of the Risk Log is a cyclical process during stage-end activities throughout the project.
This is the minimum number of times to review risks.
Lengthy or risky projects will need to review risks more frequently.

Process description

The objective of this sub-process is to revisit and revise, where necessary, the risks in the Risk Log.
These may have been affected by internal or external events.

Each risk should be examined to see if it has:

  1. Increased
  2. Disappeared
  3. Decreased
  4. Happened
  5. Stayed the same

The next Stage Plan or an Exception Plan may raise new risks or change existing risks.
This sub-process should therefore be carried out in conjunction with Planning a Stage (SB1) and Producing an Exception Plan (SB6).

Updates to the Project Plan and Business Case may also contain changes that affect items in the Risk Log.
The Business Case update may also have raised new Project Issues, which in turn raise new risks or affect risks already recognised.
See also, Management of Risk.


The Project Manager is responsible for this sub-process assisted by Project Support.
Those with Project Assurance responsibilities should check out the work.

Each major risk should have an ‘owner’ – the person best placed to observe the risk and the factors affecting it.
This person will often be a member of the project management team but not necessarily.

Information needs
Management informationUsageExplanation
Business CaseInputNeeds to be referenced in case it has new information regarding risks.
Project PlanInputRevised Project Plan may provide information as a basis for risk actions and impacts.
Stage / Exception PlanInputNew plan may contain new risks or alter existing ones.
Issue LogUpdateAre there any new Project Issues that are caused by (or could improve) the new risks?
Risk LogUpdateHas anything changed?

These are given in tabular form in the file ‘SB4 updating the risk log.doc’ in the product package.

Key criteria

  • Has the situation changed with respect to any of the identified risks?
  • Have any new risks been identified?
  • Have contingency plans been put in place, where possible, for any risks now regarded as serious?
This product contains EVERYTHING in the publications:

Managing Successful Projects with PRINCE2 - 2005 edition
Managing successful Projects with PRINCE2 – 2009 edition
Directing Projects with PRINCE2.
The Complete Project Management package.

And much more besides - at a fantastic price.