What categories are included in a Risk Breakdown Structure?

• A. Technical, External, Organizational, and Project Management.
• B. Time, Cost, Scope, Resources.
• C. Quality, Schedule, Risk, Stakeholders.
• D. Legal, Compliance, Environmental, Safety.

Answer: (A)

Risk Breakdown Structure is about organizing risks by where they originate, providing a clear way to identify and address potential problems across the project. The categories typically included are Technical, External, Organizational, and Project Management. Technical risks come from the technology, design, or implementation aspects and can affect performance or compatibility. External risks arise from outside the project or organization, such as market shifts, supplier issues, or regulatory changes. Organizational risks involve internal factors like structure, governance, culture, or staffing that can influence how the project is carried out. Project Management risks relate to how the project is planned and executed, including scope changes, estimation errors, scheduling, and resource allocation.

Using these categories helps ensure that risk identification covers the main sources of risk across the project rather than just symptoms or outcomes. Other sets listed mix performance constraints (time, cost, scope, resources) or focus on domains, but they don’t capture the broad sources of risk in the same structured way.