Contingency

A possible event or situation that might influence how the project is carried out and is anticipated by setting aside time, cost, or resource reserves.

Key Points

  • Represents potential events (known-unknown risks) that could affect scope, schedule, cost, or quality.
  • Handled through contingency reserves that are included in the approved baseline.
  • Should be tied to specific risk responses and activation triggers.
  • Different from management reserve, which covers unknown-unknowns outside the baseline.

Example

A software project anticipates possible integration issues with a third-party API. The team sets a 10% schedule buffer and a $25,000 contingency to fund extra testing and bug fixes if the integration fails initial tests. If the first integration test has critical defects (trigger), the contingency is drawn down.

PMP Example Question

Which statement best describes a contingency in project risk management?

  1. A possible event that may affect the project and is planned for by allocating reserves.
  2. Budget held by senior management for unforeseen work outside the baseline.
  3. Extra time added by team members to make estimates feel safe.
  4. A mandatory change request raised whenever a risk occurs.

Correct Answer: A — A possible event planned for with reserves

Explanation: A contingency is a potential event that could impact the project and is addressed by including contingency reserves in the baseline. Option B describes management reserve, C is padding, and D is a process action, not the definition.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Build an ICS/OT cybersecurity foundation that fits the real environment

Standard IT controls can disrupt the industrial systems they are meant to protect. Learn how to assess OT risk, design zones and conduits, apply IEC 62443 security levels, use MITRE ATT&CK for ICS, and establish passive asset visibility without risking production. Eight reconstructed incidents connect attacker techniques to the controls that failed, giving you the vocabulary and judgment to make credible security decisions from day one.

Explore the Course