Issue Log vs Risk Register: Key Differences for the PMP Exam

Two Documents, Frequently Confused

The issue log and the risk register are two of the most commonly confused project documents on the PMP exam. Both deal with problems, both require tracking and resolution, and both are updated throughout the project lifecycle. Yet they serve fundamentally different purposes, and confusing them on exam day can cost you points.

The distinction is straightforward once you internalize it: risks are uncertain future events; issues are current problems that have already occurred.

The Risk Register

The risk register is created during the Identify Risks process and progressively elaborated throughout the project. It documents:

• Identified risks (both threats and opportunities)
• Root causes of each risk
• Risk owners assigned to monitor and respond
• Probability and impact assessments
• Risk response strategies (avoid, mitigate, transfer, accept for threats; exploit, enhance, share, accept for opportunities)
• Contingency and fallback plans
• Residual and secondary risks

The risk register is a forward-looking document. It captures what might happen and what the team plans to do about it.

The Issue Log

The issue log tracks problems that have occurred and require resolution. It is typically created during project execution and includes:

• Issue description and date identified
• Issue owner responsible for resolution
• Priority and severity
• Current status (open, in progress, closed)
• Resolution description and date closed

The issue log is a present-focused document. It captures what is happening right now and who is working to fix it.

How They Interact

Risks and issues have a natural lifecycle relationship:

1. A risk is identified and recorded in the risk register
2. If the risk event occurs, it becomes an issue and moves to the issue log
3. The response strategy from the risk register informs how the issue is handled
4. New risks may be identified as a result of resolving the issue

Not all issues originate from identified risks. Some issues emerge unexpectedly — these are often called unidentified risks that have materialized. When this happens, the issue is logged immediately and a workaround (unplanned response) is implemented.

PMP Exam Question Patterns

Expect these question types:

• "Where should this be recorded?" — If the event is uncertain and future, it belongs in the risk register. If it has already happened, it goes in the issue log.
• "What should the PM do first?" — When a risk event occurs, the PM should check whether a response strategy exists in the risk register before implementing a workaround.
• "A team member reports a problem" — Log it in the issue log, assign an owner, and determine whether it originated from a previously identified risk.

Key Differences at a Glance

• Timing: Risks are future possibilities; issues are current realities
• Action: Risks get response strategies; issues get resolutions
• Creation: Risk register during planning; issue log during execution
• Ownership: Both require assigned owners, but risk owners monitor while issue owners resolve
• Updates: Both are living documents updated throughout the project

Study Tip

When practicing PMP questions, pay close attention to verb tense and certainty language. Words like "may," "could," and "might" signal a risk. Words like "has occurred," "is causing," and "currently affecting" signal an issue. This linguistic cue alone can guide you to the correct answer.

Practice distinguishing risks from issues in our concept review modules. Precise document knowledge is one of the easiest ways to gain points on the PMP exam.