When Risks Become Issues

In project management, risks and issues are related but different concepts.

Risk (before it happens)

A risk is a potential problem that might happen in the future.

• It is uncertain
• It has a probability and impact
• You plan responses before it occurs

Example

• “There is a risk that the supplier may delay delivery.”

Issue (after it happens)

An issue is a problem that has already happened or is currently happening.

• It is certain, not hypothetical
• It requires immediate action

Example

• “The supplier delayed delivery by 3 days.”

When Does a Risk Become an Issue?

A risk becomes an issue when the risk event actually occurs.

Here’s how the risk to issue events typically occur:

1. Identify risk.  The risk is identified and logged into the risk log
2. Monitor risk.  The risk is monitored as part of normal Monitor and Control
3. Risk event occurs and becomes an issue. The risk event is closed, and the new issue is entered into the Issue Log
4. Manage and resolve the issue.  The issue is managed to resolution

In Simple Terms

• Risk: Might happen
• Issue: Has happened

Quick comparison

Aspect	Risk	Issue
Time	Future	Present / Past
Certainty	Uncertain	Certain
Focus	Prevention	Resolution
Example	Possible budget overrun	Budget already exceeded