At the beginning of an IT development project, key risks were identified and assessed, and risk owners were appointed. Six months later, the IT development team reported that the project is significantly over budget, it will not be completed on time, and key personnel had left the organization. Which of the following risk management practices should be improved for future projects?
Risk monitoring should be improved for future projects. Despite the initial identification and assessment of risks, the issues of being over budget, not meeting the timeline, and loss of key personnel indicate that ongoing monitoring of risks and their mitigation strategies were likely inadequate. Continuous risk monitoring would help detect emerging risks and inefficacies in responses to take timely corrective actions.
c is better