Type the risk information sheet template — the fields a managed risk must carry, in order.

Answer

Risk information sheet Risk ID: Date raised: Probability: Impact (1-4): Description: Refinement/context: Mitigation: Monitoring: Management/contingency: Trigger: Status: Originator / owner:

Typing it once is how you get it back under exam conditions. The two fields candidates omit are refinement — which is what makes the risk actionable — and trigger, which is the pre-agreed condition at which the contingency fires. A sheet without a trigger has documented a worry, not managed a risk.

Pressman 9e ch26 §26.5–26.7