The The project manager should include secondary and residual risks as part of the risk response plan.
Secondary risks are those risks that arise as a direct result of implementing a risk response to a specific risk.
Residual risks are those risks that are expected to remain after the planned responses of risks have been taken, as well as those that have been deliberately accepted. Both secondary and residual risks should be identified, analyzed, and monitored throughout the project life cycle. The project manager should communicate the risk response plan to the project sponsor and other stakeholders, and explain how the project team has planned to manage the secondary and residual risks12 References: 1: PMI Risk Management Professional (PMI-RMP) Handbook, page 10 2: A Guide to the Project Management Body of Knowledge (PMBOK Guide) - Seventh Edition, page 11.2.2.1 project manager should include secondary and residual risks in the risk response plan, as they may still impact the project. Proactively addressing these risks will help the project team to be prepared and manage them effectively if they occur.