The project manager should validate the information and update the risk management plan.
Validating the information received from the procurement manager is the first step in identifying and assessing the impact of the delay. Once the delay has been confirmed, the project manager should update the risk management plan to include this new risk event. The updated risk management plan should include a description of the risk event, the potential impact, and a mitigation plan to minimize or eliminate the risk. This will help the project manager to proactively manage the risk and minimize any potential impact on the project schedule.
Updating the risk register and discussing it with the project stakeholders is also a good practice, but it should come after the risk management plan has been updated. The risk register is a tool for documenting risks and their status, while the risk management plan outlines the strategy for managing those risks.