2.1.

5 Risk monitoring and control

The purpose of this process is to certify that the risk identification, analysis and response
processes are on-going. Some of the requirements for this process are: checking the status of the
identified risks in the risk registers periodically; evaluating the efficiency of the risk responses used;
identifying new risks, assessing them and developing risk responses for them.

The task of identifying new risks in this sub-process is not only because of changes in the
project and its environment which cause new risks to come up but also due to appearance of secondary
risks. Secondary risk can be considered as a new risk that may arise after implementation of a risk
response (Cruz et al., 2006).