In the PMBOK® Guide, when an external event—such as a new government regulation—occurs that threatens the project ' s objectives, it is classified as a Risk (specifically an external threat). Since the project is just about to enter the execution phase, the project manager must handle this uncertainty systematically.
Why Choice C is correct:
Risk Identification and Assessment: The first step when a problem or change in the environment is " notified " is to identify the specific impact on the project (Schedule, Cost, Quality).
Risk Management Plan: This plan outlines how the team should respond to risks. It contains the processes for updating the Risk Register, performing qualitative/quantitative analysis, and selecting a Risk Response Strategy (such as Mitigation by finding an alternative component or Avoidance by changing the project design).
Proactive vs. Reactive: Even though the regulation is a current reality, the " impact " on the project ' s future execution is still a risk that needs to be managed according to the predefined risk protocols before jumping into formal change requests.
Analysis of other options:
A (Procurement plan): While the issue involves a vendor, the procurement plan describes how to buy items (bidding, types of contracts), not how to handle a major strategic roadblock caused by legal changes.
B (Project management plan): This is too broad. The project management plan is the " parent " document for all other plans. While technically true, PMI questions always look for the most specific subsidiary plan that addresses the situation.
D (Change control plan): You follow the change control plan only after you have assessed the impact and decided on a specific response. You don ' t " follow the plan " to solve the problem; you follow it to formally document and approve a solution once the risk management process has identified what that solution should be.
Key Concept: The Project Management Institute (PMI) emphasizes that Risk Management (Choice C) is the primary tool for dealing with Enterprise Environmental Factors (EEFs). By following the risk management plan, the project manager ensures that the impact of the regulation is fully understood and that a validated strategy is in place before the project’s scope, schedule, or budget is officially altered.