Which types of risk are controlled in acquisition management?

• A. Technical risk
• B. Performance, Cost, and Schedule Risk
• C. Financial risk
• D. Legal risk

Answer: (B)

In acquisition management, the focus is on the three main program risks: performance, cost, and schedule. This means actively managing whether the system will meet its required capabilities (performance risk), whether the program can be delivered within the approved budget (cost risk), and whether delivery can occur on time (schedule risk). These areas are the primary levers you control through requirements definition, cost estimation and funding management, and project scheduling and contracting.

Technical risk is typically encompassed within performance risk, while financial and legal risks are addressed through broader program governance and contract management, but they’re not treated as separate risk categories to be controlled in isolation. The triple focus—performance, cost, and schedule—is why that option is the best fit.