Manage risks, issues and changes

Practice PM-06 in the Project Management group. The basis is our-reading, and the row asks for 3 pieces of evidence.

At a glance

Ref: PM-06
Process: Project Management
Basis: our-reading
Source: Public abstract, process list
Evidence: 3 items
Gaps: 2 common

Evidence to keep

Project ManagementThe risk, issue and change log with owners
Project ManagementThe change decisions and the revised baseline
Project ManagementThe review record showing the log was read

Questions before you sign

What are the top three risks this month?
Which issues are stopping work today?
Who can approve a change, and what did the last one cost?

The practice, in our words

Keep a live risk and issue log and a change route. A risk is something that may happen; an issue is something that has. A change is a request that alters the agreed scope, schedule or cost, and it needs a decision.

What it means in a VSE

One log for all three, with a type column, is enough for a small project. Review it at every progress meeting. The change route should state who can approve what, and the plan and the estimate should be updated when a change is approved.

In a firm of 25 people or fewer, manage risks, issues and changes has to earn its time. The test for PM-06 is not whether the team understands it but whether the artefact exists at the end of the project. Shrink the meeting. Shrink the document. Keep the record.

How to evidence it

Attach the artefacts above to the Manage risks, issues and changes row with the project name, the owner and the date. The anchor for PM-06 is The risk, issue and change log with owners. A named person must produce it on request.

For PM-06, the reviewer will sample one live decision and ask for The change decisions and the revised baseline. No artefact, no evidence. A file that depends on one person's mailbox is not a file for manage risks, issues and changes.

What an assessor samples

An assessor reads the manage risks, issues and changes practice, asks for its evidence and tests one project against it. For PM-06, the useful sample is the most recent project that used the practice, not the best one. A reconstruction written for the visit is a finding for PM-06 if the practice cannot be shown to have happened when it mattered.

Common gaps

A risk log written once for the audit
Scope changed by email with no baseline update

What changes from the 2019 report. For PM-06, project management is the spine the other practices hang from. The transition work is to make the plan, the progress reading and the closure exist as records rather than as habits.

Where the draft fits

The public abstract places manage risks, issues and changes inside one of the four processes the Intermediate profile covers. For PM-06, the draft clause numbering and wording are not public, so this page cites Public abstract, process list and does not quote the draft. The basis label for PM-06 says whether the practice is stated in the public record, named as a process in the series, or our reading.

Related practices

Source for this page: Public abstract, process list. Open the record and compare it with the PM-06 statement above. Retrieved 2026-10-22.