HKSM

Structured cue lists that help teams brainstorm where risks might come from. They highlight common sources of risk, and many industry- or project-specific versions can be found from public sources.

Key Points

• Acts as a trigger to consider diverse sources of risk during identification.
• Usually organized by categories (for example: technical, external, organizational, regulatory, and vendor).
• Can be tailored to the industry, lifecycle, and complexity of the project.
• Complements other techniques such as brainstorming, checklists, SWOT, and PESTLE.

Example

A healthcare software project uses a risk prompt list with categories like requirements, integration, cybersecurity, compliance, suppliers, and operations. During a workshop, each category is reviewed to uncover threats (e.g., new privacy regulations) and opportunities (e.g., vendor performance incentives) that are then logged for analysis.

PMP Example Question

Which tool best ensures the team considers a broad set of potential risk sources during a risk identification workshop?

1. Risk prompt list
2. Risk threshold
3. Risk appetite statement
4. Risk register

Correct Answer: A — Risk prompt list

Explanation: A risk prompt list provides categorized cues that stimulate thinking about where risks may originate. Thresholds and appetite guide risk attitude, and the register records identified risks rather than prompting them.