Why Treating Risks as Only Threats is Costing You Marks (and Projects)
If you’re grinding through PRINCE2 7 Practitioner mocks right now, you already know risk questions appear in nearly every paper. And if you’re already running projects for a living, you’ve felt that horrible sinking feeling when a threat you never saw coming derails the schedule.
Here’s the single biggest reason people drop marks and real projects underperform: most candidates (and many organisations) still treat risk as “only the bad stuff”.
In PRINCE2 7th Edition, risk is neutral. It is simply an uncertain event that could have a favourable OR unfavourable effect on objectives. Miss that, and you’ll bleed marks on exam day. Ignore it at work, and you’ll leave money and benefits on the table.
Let’s put that right today, in plain UK English, with zero fluff.
What the Official PRINCE2 7 Manual Actually Says About Risk
A risk is:
“An uncertain event or set of events that, should it occur, will have an effect on the achievement of objectives. It includes both threats to and opportunities for the project.”
You use the same five-step procedure for both threats and opportunities:
- Identify
- Assess
- Plan
- Implement
- Communicate
The responses change (avoid/reduce for threats, exploit/enhance for opportunities), but the process stays identical. Examiners adore testing whether you really get that.
The PRINCE2 7 Risk Register Template You Can Start Using Tomorrow (Mobile-Friendly Version)
Copy and paste the headings below into Excel, Google Sheets, or even the Notes app on your phone.
It follows the exact recommended composition from the manual, so it’s perfect for exam answers and real projects.
Risk ID: R001
Date Raised: 15-Nov-2025
Raised By: J. Smith
Category (optional): Supplier
Description: (always use Cause – Event – Effect format):
Because we are using a new supplier who has no track record with us, there is a risk of late delivery of the server hardware, which would delay go-live by two weeks and push us into penalty territory with the client.
Threat or Opportunity: Threat
Proximity: Within 2 months
Impact: (1-5 scale): 4 (Very High)
Probability: (1-5 scale): 3 (Medium)
Expected Value: –12
Pre-response Score: 12
Post-response Score (after actions): 4
Status: Open
Risk Owner: Project Manager
Risk Actionee: Procurement Lead
Response Strategy: Reduce
Response Actions: Add liquidated damages clause + require weekly progress reports
Target Date for Actions: 30-Nov-2025
Notes/Updates: Contract amendment signed 18-Nov-2025
Here’s an opportunity example using exactly the same layout:
Risk ID: R002
Date Raised: 16-Nov-2025
Raised By: S. Khan
Category (optional): Technical
Description:
Because the new platform is cloud-native and our current data centre contract ends in March, there is an opportunity to decommission the old servers six months early, which would save £40,000 per year in hosting and energy costs.
Threat or Opportunity: Opportunity
Proximity: 4–6 months
Impact (1-5 scale): 4 (Very High positive)
Probability (1-5 scale): 4 (High)
Expected Value: +16
Status: Open
Risk Owner: Business Case Owner
Risk Actionee: IT Lead
Response Strategy: Enhance
Response Actions: Run a paid proof-of-concept in December to confirm savings and get early sign-off
Target Date for Actions: 15-Jan-2026
Notes/Updates: Pilot budget approved by Steering Group 17-Nov-2025
Just duplicate those two entries and you have a fully compliant PRINCE2 7 risk register that works on any device.
How to Balance Threats and Opportunities Without Extra Work
Run two quick workshops
One sheet for “What could hurt us?” and one for “What could make this project brilliant?” You’ll surface twice as many risks in the same time.
Score them the same way
Use your 5×5 grid for both. For opportunities, just turn the positive side upwards. The risks with the biggest absolute expected value (positive or negative) float to the top automatically.
Talk about both in every Highlight Report
A single line like “Two new opportunities (R007 & R008) identified this period with combined expected value +£95k” instantly proves to the examiner (and your Project Board) that you’re on top of PRINCE2 7.
Refresh the Business Case at every stage boundary
Opportunities usually mean more benefits or earlier benefits. If that isn’t flowing into your benefits forecast, you’re not managing risk properly.
Five Bullet-Proof Exam Tips for PRINCE2 7 Risk Questions
Never, ever say “risk is only negative”. Quote the manual definition word-for-word when justification is asked for.
Know the four opportunity responses cold: exploit, enhance, share, reject.
Risk Owner monitors; Risk Actionee does the actual work. Quote the difference in scenario questions.
Proximity is now mandatory – always mention it.
The Risk Management Approach must explicitly describe how both threats and opportunities will be handled. If the question gives you a dodgy Approach document, flag that gap.
The Real Risk Payoff
Get this right and two things happen fast:
You stop losing the 6–10 marks that most candidates drop on risk questions.
Your live projects start delivering extra benefits that make sponsors remember your name at appraisal time.
I’ve watched people get promoted simply because they were the only PM consistently bringing upside risks to the table.
So grab those headings, paste them into your phone or laptop right now, and start treating opportunities as proper risks.
You’ll pass the exam with a higher score, and you’ll deliver projects that people actually thank you for.
You’ve got everything you need. Now go and make uncertainty work for you instead of against you.
PRINCE2® 7 Foundation and Practitioner
Learn PRINCE2® 7 Foundation and Practitioner Online
** Enhance your PRINCE2 career now **
PRINCE2® Masterclass gives you the skills necessary to manage projects effectively and achieve your objectives.
Get 7 days a week 12 months one to one coaching with ex PRINCE2 examiner Dave Litten.
PRINCE2® is a globally recognized project management framework. By completing both the Foundation and Practitioner courses through our self-paced e-learning, you will develop an understanding of the methodology and learn how to effectively adapt it to any project.
The PRINCE2® 7 Foundation and Practitioner Masterclass is PeopleCert Accredited and guarantees to take you from PRINCE2 Novice to PRINCE2 Practitioner with our famous video learning, study guides and practice exams.
What Does the Masterclass Cover?
The PRINCE2 Foundation examination assesses your knowledge and comprehension of the PRINCE2 project management methodology as detailed in the syllabus. The PRINCE2 Practitioner examination, on the other hand, gauges your ability to apply and tailor the PRINCE2 method. Candidates who pass the Practitioner exam should be able to start implementing the method on an actual project with some guidance. However, their effectiveness may differ based on their experience in project management, the complexity of the project, and the level of support they receive in their work environment.
