A risk related to a contractor deliverable was added to the risk register. At the final inspection the mitigation did not achieve the expected outcome. What should the project manager do next?

The project manager should reassess the risk's likelihood and the mitigation strategy because the initial mitigation was ineffective. This involves understanding why the mitigation failed and determining if the risk still exists, its current probability, and its potential impact. This re-evaluation is a crucial step in risk management to ensure appropriate actions are taken moving forward. Reviewing procurement performance or auditing the procurement process are reactive steps that might be part of a broader lesson learned or quality assurance activity, but the immediate priority is to address the failed risk mitigation directly. Submitting a change request to implement the risk response plan is premature without first understanding why the initial response failed and what new or adjusted response is needed.