All,

Where do we implement the risk response ?

Is it Execution, or M& C or Planning ?

My understanding is that risk response depends on the priority of risk.

If it is of high priority, it will be taken care of in the planning phase by either avoiding the risk or by mitigating the risk.

Avoiding the risk - removing the WBS or Work Package , extend schedule etc

Mitigating the risk - developing protype (which falls in planning to collect requirements)

If it is medium to low priority risk, it will be either transfered or accepted.