An IT project for recording sold lottery tickets experienced a system failure that caused 10 numbers to be sold twice during the peak month when the prize was largest. The team is concerned one of those duplicate tickets could win. What should the project manager do first?

The project manager should first review the risk register because it is the primary tool for managing identified risks. This allows the team to determine if the system failure was a known risk and, if so, to immediately execute the pre-defined response plan. This proactive approach ensures a structured and efficient resolution. Reassuring the sponsor without understanding the full scope of the issue is premature and unprofessional. Running tests is a valid step, but it should follow the initial assessment from the risk register to ensure the tests address the correct aspects of the failure and potential solutions. Informing the sponsor is necessary, but it should be done after understanding the situation and potential response from the risk register, rather than immediately requesting funds without a clear plan.