Definition:
A Secondary Risk is a new risk that emerges as a result of implementing a risk response to an original risk. These risks arise when risk mitigation efforts inadvertently introduce additional challenges or uncertainties.
For example, suppose a company implements data encryption as a risk response to cybersecurity threats. This solution enhances security but introduces a secondary risk: slower system performance and higher storage costs due to encryption overhead.
Secondary risks must be identified, analyzed, and monitored just like primary risks. Risk management plans should include contingency strategies for handling secondary risks to prevent them from escalating into major project issues.
