In MSP, threats are negative risks that could impact the programme adversely. Valid responses to threats include Avoiding, Accepting, or Reducing the risk to mitigate potential harm. However, “Enhance” is not a valid response for a threat because it implies increasing the likelihood or impact, which is contrary to risk management objectives.

The MSP Practitioner states:“Threats should be minimized not enhanced,”reinforcing the principle that risk responses should focus on reducing negative effects or avoiding risks altogether. Accepting a risk might be chosen when mitigation is impractical or cost-prohibitive but still requires monitoring.

Understanding and applying appropriate risk responses is vital to effective programme risk management and maintaining control over uncertainties that could derail delivery.