In a contract risk assessment, who is typically responsible for monitoring risk controls?

• A. The risk owner assigned to each risk
• B. The contractor's operations manager
• C. The project sponsor
• D. The procurement officer

Answer: (A)

Monitoring risk controls is the ongoing duty of the risk owner assigned to each risk. This person has the authority and accountability to track how controls perform, ensure mitigation actions are completed, and reassess the risk as conditions change. The risk owner keeps the risk register up to date, reviews control effectiveness, and escalates issues if residual risk exceeds what’s acceptable. The project structure relies on clear ownership to ensure timely action and accountability.

Other roles play important parts in their areas—an operations manager handles day-to-day operational delivery, the project sponsor provides overarching support and funding, and the procurement officer manages purchasing and supplier terms. However, they aren’t typically responsible for the continuous monitoring of every risk control across the contract.