Assumption Log

A project document that captures, tracks, and updates all assumptions and constraints from project start through closure.

Key Points

  • It is a living document, updated whenever new assumptions or constraints are identified, validated, or disproved.
  • Entries typically include description, source/owner, date, potential impact, status, and any required actions.
  • It feeds risk management; invalid or uncertain assumptions can become risks or issues requiring responses.
  • Reviewed in governance and change control to understand effects on scope, schedule, cost, and quality.

Example

On a software project, the team assumes the vendor API will be available by May 1, and notes a constraint that the budget cannot exceed USD 500,000. The project manager records both in the assumption log, assigns owners to validate the API date and monitor budget caps, and updates the log when the vendor confirms a June release, triggering a schedule risk and mitigation actions.

PMP Example Question

During planning, the project manager documents a belief that a supplier can deliver components by month-end without formal confirmation and notes a fixed funding cap set by the sponsor. Which document should be updated?

  1. Risk register
  2. Cost baseline
  3. Assumption log
  4. Procurement management plan

Correct Answer: C — Assumption log

Explanation: Assumptions and constraints are recorded and maintained in the assumption log. The risk register captures identified risks, while the cost baseline and procurement plan serve different purposes.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Launch your career!

HK School of Management provides world-class training in Project Management with AI and Agile Methodologies. Practical skills, tools, and guidance you can apply right away. Covered by Udemy's 30-day refund policy.

Learn More