This is a secondary risk because it is a risk that arises as a direct result of implementing a risk

response (in this case, procuring material from a different supplier).

A secondary risk is a risk that arises as a direct result of implementing a risk response to a specific

risk. In this case, the risk response is to procure the material from a different supplier if the first

supplier fails to deliver on time. The secondary risk is that there may be differences in the material

provided by the first and second supplier, which could affect the quality, cost, or schedule of the

project. A secondary risk is different from a residual risk, which is a risk that remains after a risk

response has been implemented. A primary risk is the original risk that triggers a risk response. A

normal risk is not a standard term in risk management, but it could refer to a risk that is expected or

inherent in a project. Reference: PMI Risk Management Professional (PMI-RMP) Examination

Content Outline and Specifications1, page 9; A Guide to the Project Management Body of Knowledge

(PMBOK® Guide) – Sixth Edition, page 397; Secondary vs Residual Risk | Types of Risks on the PMP

Exam.