What should we do when a previously accepted risk becomes larger?
Outdated risk acceptanceReassess exposure and renew the decision at the appropriate authority level. Acceptance applies to understood conditions, not to unlimited deterioration in those conditions.
What to do now
- Identify what changed
- Reassess consequences and response options
- Check the original acceptance boundary
- Obtain a renewed decision and update controls
When to escalate
Escalate when
The new exposure exceeds the accepting person's authority.
Who decides
The accountable risk owner
Example
A previously tolerable delay becomes material when a dependent launch date is brought forward.
Mistake to avoid
Treating an old acceptance as permanent permission.
Prevent a repeat
Review whether response tasks and trigger conditions remain appropriate as the project changes.
Suggested ApprovedFlow setup
- Documents
- Tasks
- Approvals
Store the risk assessment as a controlled project document and assign response tasks; do not assume a native risk engine is enabled. See the platform
Related cases
- A risk we recorded has now happened. What changes?Risk becoming an issue
- How should we handle a risk we cannot prevent?Unavoidable exposure
- How should we handle conditional acceptance?Uncontrolled acceptance conditions
- Our acceptance criteria change after delivery. What should we do?Moving acceptance boundary