Who is primarily responsible for maintaining the risk management plan in contract management?

• A. The senior executive sponsor.
• B. The procurement officer.
• C. The contract manager
• D. End users

Answer: (C)

Maintaining the risk management plan centers on ongoing ownership of contract risks throughout the contract’s life. The contract manager serves as the focal point for contract performance, so they are best positioned to keep the risk register current, track triggers, assign mitigation actions, and verify that responses are implemented as scope and conditions change. This role involves coordinating with stakeholders, monitoring risk status at milestones, and reporting updates to sponsors and governance as needed. By having one accountable person responsible for risk monitoring and action, the plan remains living and actionable rather than a static document.

The senior executive sponsor provides overall oversight and approves risk tolerance, but the day-to-day maintenance—identifying new risks, updating risk responses, and ensuring timely follow-through—belongs to the contract manager who understands the contract’s specifics and performance realities. End users can flag issues, and procurement officers manage procurement-related aspects, but neither is primarily responsible for continuously updating the risk management plan.