All,

Where do we implement the risk response ?

Is it Execution, or M& C or Planning ?

My understanding is that risk response depends on the priority of risk.

If it is of high priority, it will be taken care of in the planning phase by either avoiding the risk or by mitigating the risk.

Avoiding the risk - removing the WBS or Work Package , extend schedule etc

Mitigating the risk - developing protype (which falls in planning to collect requirements)

If it is medium to low priority risk, it will be either transfered or accepted.

If it is transferred, it means we are talking about make-or-buy analysis and contract. Hence, the transfer of risk should be in the planning phase again.  

If the risk is accepted, it will be either Actively Accepted or Passively Accepted. 

If the risk is actively accepted, we have the contingency included in the estimate activity cost. Perhaps, some triggering event will indicate us to use the time or money contingency. So actively accepting the risk means 'Planning' or 'Executing' ?

If the risk is passively accepted, we are going for 'workaround'. Workaround is in Exection phase. 

The PMBOK says that the risk responses are implemented in the M& C Phase (First line on page 349).

After all, what is the correct answer ?

Thanks