Risk Response Strategies: Accept, Mitigate or Transfer?
Understand the four risk response strategies — accept, avoid, mitigate and transfer — and how to choose the right response for each project risk.
Identifying a risk is only the first step. The more consequential question is: what are you going to do about it? Project managers who default to writing risks on a register without deciding on a clear response are not managing risk — they are documenting it.
The Options
Accept
Acknowledging the risk and choosing to proceed without specific action. Passive acceptance does nothing; active acceptance sets aside a contingency reserve to deal with the risk if it materialises. Acceptance is appropriate when the cost of any other response exceeds the expected cost of the risk itself, or when the risk is genuinely outside the project's control.
Mitigate
Taking action to reduce the probability or impact of the risk before it occurs. Mitigation is the most common risk response for project-controllable risks: adding a skilled resource to address a capability gap, running a proof-of-concept to reduce technology risk, building in a schedule buffer at a critical dependency. Good mitigation is proportionate — the cost of the action should be justified by the reduction in expected risk cost.
Transfer
Shifting the financial consequence of the risk to a third party — typically through insurance, fixed-price contracts or performance bonds. Transfer does not eliminate the risk (the adverse event can still occur and the project can still be disrupted), but it limits the financial exposure. Transfer is particularly appropriate for risks that commercial partners are better placed to manage or price.
Avoid
Changing the project plan to eliminate the risk entirely — removing a scope element that creates an unacceptable exposure, choosing a proven technology over an unproven one, or extending the schedule to allow more preparation time. Avoidance is the most effective response where it is feasible, but it often involves trade-offs in scope or cost.
Why It Matters in Practice
The art of risk response planning is in choosing the right strategy for each risk and allocating response effort proportionately. The most common failure is under-investment in mitigation for high-probability, high-impact risks — often because the cost of mitigation is visible and the cost of the risk is uncertain. Quantitative risk analysis (Monte Carlo simulation, decision trees) can make the case for investment more concrete.
In the Simulation
In SPPIN Sim, your risk response strategy determines how much you invest in contingency and mitigation each turn, and how exposed you are when risk events fire. Teams that build a well-calibrated mitigation strategy tend to absorb shocks more effectively — whilst those relying entirely on acceptance face periodic large negative events that are difficult to recover from in the scoring.