A company has an existing contract to maintain and enhance a client's customer database. The company's legal department informs the project manager that a new piece of legislature requiring stricter protection of customer information might soon be signed into law. The law will require additional security features to be implemented into the database the project manager is maintaining. These features are not included in the scope of the current contract.
What should the project manager do?
The project manager should update the risk register to include this issue and discuss the appropriate risk response plans with the project sponsor and client. This approach allows the project manager to proactively manage the potential impact of the new legislation. By updating the risk register, the project manager ensures that the project team is aware of the potential change and prepared to address it. Discussing it with key stakeholders ensures that there is a common understanding and a plan in place to address the changes if they become necessary. This balances risk management with stakeholder engagement.
This approach allows the project manager to proactively manage the potential impact of the new legislation. By updating the risk register and discussing it with key stakeholders, the project manager ensures that the project team is prepared and that there is a plan in place to address the changes if and when they become necessary. This strategy provides a balanced approach, combining risk management with stakeholder engagement.