For the Portfolio Risk Management domain, you must respond to one of the following two experience prompts:
- Defined and/or enhanced the portfolio risk strategy, including tolerance and thresholds, based on the portfolio goals and objectives
- Enabled the organization to capitalize on opportunities or manage threats based on portfolio risk management processes, methods, and/or techniques
Both prompts require you to show that you addressed risk at the portfolio level. You should focus on how you developed or applied portfolio-wide risk approaches that supported decision-making, sequencing, resource allocation, or value delivery.
Questions to help candidates think through Prompt 1: Defined or Enhanced Risk Strategy
Use these questions to guide your example:
- What was lacking or unclear in the portfolio’s risk strategy before you acted?
- What changes or enhancements did you make to the risk management framework?
- Did you define risk tolerance or set escalation thresholds across components?
- How did you categorize or prioritize risks (strategic, regulatory, financial, etc.) at the portfolio level?
- Did you establish a portfolio risk register or improve an existing one?
- How were thresholds, tolerances, or escalation paths defined, communicated, and applied?
- What governance bodies were involved in approving or applying the risk strategy?
- How did the strategy help decision-makers balance risk vs. opportunity?
- What changed in how the portfolio was managed—were decisions clearer, faster, or more aligned with risk appetite?
PMI terms and tools to consider:
Portfolio risk strategy, risk tolerance, escalation thresholds, portfolio risk register, risk categorization, portfolio risk policy, risk appetite statement, risk governance structure, risk scoring model, risk management framework
Questions to help candidates think through Prompt 2: Applied Risk Processes to Manage Threats or Opportunities
Use these questions to develop your response:
- What threats or opportunities affected the portfolio’s ability to deliver on strategic goals?
- How did you identify, assess, and respond to risks across components?
- What techniques or processes did you use (dependency risk analysis, sensitivity analysis, scenario planning)?
- How did risk data influence roadmap decisions, sequencing, or resource shifts?
- Did you escalate risks to governance bodies based on defined thresholds?
- Did you act on any opportunity (e.g. reusable solution, vendor partnership, timing advantage) that improved delivery or value?
- How did you balance trade-offs between risk, reward, and alignment?
- What changed in the portfolio as a result—was risk exposure reduced, or was opportunity realized?
PMI terms and tools to consider:
Risk exposure, dependency risk, opportunity management, scenario analysis, risk-adjusted performance, risk threshold triggers, risk escalation, strategic risk, portfolio risk review, risk trade-off analysis
Show real decisions and outcomes: Did you shift the roadmap, adjust resource allocations, recommend delaying or accelerating a component, or escalate risk for governance review? That’s the type of portfolio-level thinking PMI is looking for.
PMI Risk Tools and Terms
- Portfolio-level risk register
- Risk thresholds and tolerance
- Risk appetite statement
- Risk categories (strategic, financial, reputational, etc.)
- Risk score
- Probability-impact matrix
- Three lines of defense
- Risk capacity
- Opportunity management
- Dependency risk analysis
- Risk heat maps
- Escalation paths
- Risk response planning
- Risk-adjusted performance analysis
- Risk management policy
- Risk management framework
- Scenario analysis
- Sensitivity analysis
- What-if analysis
- Tradeoff analysis
Brainstorming checklist (for all PfMP prompts)
Here’s a list they should run through before writing:
- Did I articulate the strategic driver or business goal/objective behind my decision?
- Did I use a PMI term (component, interdependency, prioritization, portfolio roadmap, strategic alignment, value scoring, risk thresholds, stakeholder influence)?
- Did I show a decision point (or recommendation) and explain the why of that recommendation?
- Did I use a tool or technique (scoring model, scenario analysis, prioritization matrix, risk register, stakeholder grid) and explain how I used it?
- Did that decision influence the portfolio as a whole?
- Did I mention handling trade-offs, constraints, or strategic change?
- Did I show handling governance, escalation, or threshold rules?
- Did I include an outcome—what changed, what was the benefit, what value was realized?
- Did I simplify language so a reviewer unfamiliar with my org can understand strategic logic?
- Did I avoid component-level or execution descriptions and stay focused on the portfolio management mindset?