10.4 Issue Management Process, Escalation, and Governance

Key Takeaways

  • BoK7 defines an issue as a problem that is now breaching, or is about to breach, delegated tolerances for work on a project or programme; issues require support from the sponsor to agree a resolution.
  • Day-to-day operational problems that can be managed within the project manager's existing delegated boundaries do not require formal escalation to the sponsor.
  • Delegated tolerances represent pre-authorized boundaries within which the project manager exercises autonomous decision-making without seeking sponsor approval.
  • BoK7 shows issue resolution as: log and analyse the issue quickly, update the risk analysis, escalate the analysis to the sponsor, assign actions to the relevant team member, apply change control and re-plan if tolerances are breached, and track the issue through to closure.
  • The Project Sponsor is the ultimate decision-maker for escalated issues, holding formal governance authority to adjust baselines, commit management reserves, or accept scope trade-offs.
Last updated: September 2026

10.4 Issue Management Process, Escalation, and Governance

Definition (APM BoK7 glossary): An issue is a problem that is now breaching, or is about to breach, delegated tolerances for work on a project or programme. Issues require support from the sponsor to agree a resolution.

BoK7 (4.3.5) states the purpose of issue management in one line — "adapting the plan to resolve issues" — and adds that "in project management, an issue occurs when the tolerances of delegated work have been, or will definitely be exceeded". It also defines escalation as "the process by which issues are drawn to the attention of a higher level of management".

Even with world-class risk management, unforeseen events will occur during project execution. A critical sub-contractor may collapse into bankruptcy, an unforeseen geological fault may be uncovered during basement excavation, or a sudden change in national regulations may invalidate an approved architectural design. When the unexpected strikes, unstructured emotional panic and ad-hoc decision-making lead to chaos, unauthorized spending, and uncontrolled scope creep.

Issue management provides the disciplined, auditable governance framework required to capture, assess, escalate, and resolve major disruptions. It ensures that problems are addressed methodically and that decisions requiring additional funds, extended timelines, or scope trade-offs are made by the appropriate executive authority.


Operational Problems vs. Formal Project Issues

A foundational concept in the APM framework is distinguishing between routine operational problems and formal project issues:

1. Day-to-Day Operational Problems

On any project, minor disruptions occur daily: a team member calls in sick for two days, a piece of test equipment requires a software reboot, or a shipment of drywall arrives four hours late. If the Project Manager escalated every minor hiccup to the Project Sponsor or Project Board, governance would grind to a halt, and executive leaders would be overwhelmed by trivia. Project managers are paid to manage. Minor problems that can be resolved within the project manager's existing authority, budget contingency, and schedule float are operational problems, not formal issues.

2. Formal Project Issues

A formal issue arises only when a problem or deviation breaches, or is forecast to breach, the Project Manager's delegated tolerances. When a crisis exceeds the PM's pre-authorized authority boundaries, the PM cannot unilaterally fix it without violating governance. It must be formally declared as an issue and escalated to the Project Sponsor.


Delegated Tolerances and Management by Exception

To understand issue escalation, one must understand how governance boards delegate authority:

1. Delegated Tolerances

During project planning, the Project Sponsor and Governance Board establish tolerances for the Project Manager across key performance dimensions:

  • Time Tolerance: The permissible variance on the schedule baseline (e.g., $\pm 2$ weeks against an intermediate milestone, provided the final handover date is unaffected).
  • Cost Tolerance: The allowable expenditure variance on the approved budget (e.g., $\pm 5%$ of total project cost, or up to £20,000 in contingency expenditure).
  • Scope and Quality Tolerances: Permissible minor technical variances that do not impair operational performance or customer acceptance criteria.

2. The Exception Principle ("Management by Exception")

Under APM governance, the project manager operates under the principle of management by exception:

  • As long as project performance is forecast to remain comfortably within agreed tolerances, the project manager exercises full operational autonomy. The sponsor does not micromanage daily tasks.
  • The moment an actual performance variance or future forecast threatens to breach a tolerance limit, an exception condition exists. The project manager's autonomous authority expires, triggering mandatory escalation to the Project Sponsor via an Exception Report.
+-----------------------------------------------------------------------------------+
|                 MANAGEMENT BY EXCEPTION & TOLERANCE BOUNDARIES                    |
+-----------------------------------------------------------------------------------+
|                                                                                   |
|  [ UPPER COST/SCHEDULE TOLERANCE LIMIT ]  ======================================  |
|                                                  ^                                |
|                                                  | EXCEPTION: Mandatory Escalation|
|  ................................................|..............................  |
|                                                  |                                |
|   Project Performance Variance Tracking        [ CRISIS ]                         |
|   (Managed autonomously by PM)                   |                                |
|                                                  v                                |
|  [ LOWER COST/SCHEDULE TOLERANCE LIMIT ]  ======================================  |
|                                                                                   |
+-----------------------------------------------------------------------------------+

The Stages of an Issue Resolution Process

Assessment criterion 7.8 asks you to "state the stages of an issue resolution process". BoK7 (Figure 4.3.5, "Key aspects of issue resolution") sets out six, and two of them are the ones candidates most often omit: update risk analysis and apply change control.

BoK7 stageWhat BoK7 says
Log and analyse the issue quickly"When an issue is detected, it is logged in an issue register and analysis is performed quickly to understand the nature of the issue, its causes and impacts if it is not resolved." Prioritisation is based on the success criteria and benefits, taking account of the relative priorities of scope, quality, time, cost and benefits in the business case.
Update risk analysisIssues happening now may be the cause of new risks, or may change the assessed likelihood or impact of existing ones, so the risk analysis is revisited.
Escalate the analysis to the sponsor"Issues are escalated to the sponsor, who may, in turn, escalate them to the governance board for resolution."
Assign actions to the relevant team member"Actions are assigned to the person or group who is best placed to address the issue and identify and implement a resolution in a timely manner."
Apply change control and re-plan if tolerances are breached"Issues that result in changes to scope or any other part of the baseline plan are progressed through change control", re-planning the deployment baseline and the PMP.
Track the issue through to closure"The management of issues is tracked from identification through to resolution, including any change control and replanning."

Watch the distractors. "Share the issue with stakeholders" sounds reasonable but is not one of APM’s stages — communication happens throughout, and is not a discrete stage of issue resolution. "Apply change control", by contrast, is.

BoK7 also warns about barriers to effective adoption: "a lack of time or reluctance from project professionals to identify and escalate issues early" at one end, and "an inability of the governance board to make an informed decision that addresses the root cause of the issue rather than treating the symptoms" at the other. It suggests engaging members of a project management office (PMO) to help facilitate resolution.

The practical five-stage walkthrough below expands those steps into the sequence a project team actually runs:

+-----------------------------------------------------------------------------------+
|                    THE 5-STAGE ISSUE RESOLUTION PROCESS                           |
+-----------------------------------------------------------------------------------+
|                                                                                   |
|  [ 1. IDENTIFICATION & LOGGING ]                                                  |
|  - Detect problem or materialized risk                                            |
|  - Record immediately in Issue Log (Assign unique Issue ID)                       |
|                  |                                                                |
|                  v                                                                |
|  [ 2. ASSESSMENT & IMPACT ANALYSIS ]                                              |
|  - Quantify effects on Cost, Time, Scope, Quality, Safety, Benefits               |
|  - Formulate viable resolution options and evaluate trade-offs                    |
|                  |                                                                |
|                  v                                                                |
|  [ 3. ESCALATION ]                                                                |
|  - Breach of delegated tolerance identified                                       |
|  - Compile and submit formal Exception Report to Project Sponsor                  |
|                  |                                                                |
|                  v                                                                |
|  [ 4. DECISION & ACTION PLANNING ]                                                |
|  - Project Sponsor reviews options & business case viability                      |
|  - Sponsor authorizes extra budget, schedule extension, or scope change          |
|                  |                                                                |
|                  v                                                                |
|  [ 5. EXECUTION, MONITORING & CLOSURE ]                                           |
|  - Implement corrective actions; re-baseline Project Management Plan              |
|  - Verify problem resolution, close Issue Log entry, capture lessons learned      |
|                                                                                   |
+-----------------------------------------------------------------------------------+

Stage 1: Identification and Logging

  • Activities: An issue is identified—either through an unmitigated risk materializing, a major defect discovered during testing, an unexpected supplier failure, or an external regulatory shock.
  • The Issue Log: The project manager immediately enters the event into the project Issue Log (or Issue Register). Essential fields include:
    • Issue ID: Unique identifier (e.g., ISS-012).
    • Date Raised and Originator: When and who flagged the problem.
    • Issue Description: Precise description of the current reality.
    • Affected Objectives: Initial assessment of impacted work packages, dates, and costs.
    • Status: Open, Under Assessment, Escalated, Resolved, Closed.

Stage 2: Assessment and Impact Analysis (including updating the risk analysis)

  • Activities: The project manager and team conduct an immediate technical, financial, and operational investigation. BoK7 pairs this with updating the risk analysis, because a live issue frequently creates new risks or changes the probability and impact of existing register entries:
    • Root Cause Analysis: Why did this problem occur? Is it systemic or isolated?
    • Impact Analysis: Quantifying the precise consequences on the project baseline. Will it delay the critical path? By how many days? What is the financial cost of repair? Does it compromise health and safety or invalidate the business case?
    • Option Formulation: Developing realistic resolution options (e.g., Option A: Hire specialized emergency contractor at £30k to protect schedule; Option B: Accept 3-week schedule slip with zero additional cost; Option C: Descope feature).
    • Recommendation: Formulating a recommended option with clear rationale.

Stage 3: Escalation

  • Activities: If the impact analysis confirms that resolving the issue requires exceeding delegated tolerances (or if the issue directly threatens the business case), the Project Manager escalates the issue.
  • The Exception Report (Issue Escalation Report): A formal management document submitted to the Project Sponsor containing:
    • Clear statement of the issue and why tolerance has been breached.
    • Detailed impact analysis across the triple constraints.
    • Evaluated resolution options with cost, time, and quality trade-offs.
    • The Project Manager's recommended course of action.

Stage 4: Decision and Action Planning

  • Activities: The Project Sponsor (supported by the Project Board/Steering Committee) convenes to review the Exception Report.
  • Governance Decision: The Sponsor evaluates the options against strategic organizational goals and ongoing business case viability. The Sponsor possesses the authority to:
    • Authorize the recommended resolution option.
    • Release management contingency funding or reserves.
    • Grant an extension to the approved project schedule baseline.
    • Approve a change in deliverable scope or quality standards.
    • In extreme cases where the issue destroys the financial viability of the initiative, make the strategic decision to terminate the project.

Stage 5: Execution, Monitoring, and Closure (including change control)

  • Activities: Once the Sponsor renders a formal decision:
    • Where the resolution changes scope or any other part of the baseline plan, it is progressed through formal change control — BoK7 treats this as an explicit stage of issue resolution, not an optional extra.
    • The Project Manager updates the Project Management Plan (PMP), baselines, and operational schedules to reflect approved changes.
    • Corrective actions are assigned to team members and executed.
    • Progress is monitored closely until the issue is fully neutralized.
    • The issue is tracked from identification through to resolution, and the entry in the Issue Log is updated to "Closed" with the resolution summary.
    • Lessons learned are documented in the project archives to prevent similar issues on future projects.

The Central Governance Role of the Project Sponsor

In the APM framework, the Project Sponsor represents the vital bridge between project delivery and executive corporate leadership. While the Project Manager is responsible for daily delivery, the Project Sponsor is personally accountable for the Business Case and the ultimate realization of benefits.

When formal issues arise, the Project Sponsor fulfills critical governance responsibilities:

  1. Arbitrating Tolerance Breaches: The Sponsor owns project tolerances. Only the Sponsor has the authority to expand tolerances or reset project baselines.
  2. Securing Corporate Resources: The Sponsor has the executive seniority to secure additional corporate funding, release management reserves, or reassign critical personnel from other business departments.
  3. Managing External and Senior Stakeholders: When an issue threatens public relations, key client relationships, or statutory regulators, the Sponsor leads high-level stakeholder negotiations.
  4. Safeguarding Business Case Viability: If resolving an issue costs more money than the project will ever generate in benefits, the Sponsor has the fiduciary responsibility to halt or re-scope the project rather than pouring good money after bad.

Summary of the APM Issue Resolution Framework

StagePrimary ActivitiesAccountable RoleKey DocumentationCritical Decision Criteria
1. Identification & LoggingDetect problem, confirm certainty ($P=100%$), record in register.Project ManagerIssue Log (Issue Register)Is the problem a live reality impacting project deliverables?
2. Assessment & AnalysisInvestigate root cause, quantify impact on triple constraints, formulate options.Project ManagerImpact Assessment, Options AnalysisDoes the forecasted impact exceed delegated tolerances?
3. EscalationCompile formal justification, present options and recommendation to governance.Project ManagerException Report (Issue Escalation Report)Confirm that resolution exceeds project manager's autonomy.
4. Decision & PlanningReview business case viability, select resolution option, authorize baselines.Project Sponsor / Project BoardGovernance Approval, Revised BaselineDoes the project business case remain commercially viable?
5. Execution & ClosureImplement corrective actions, re-baseline PMP, monitor to completion, close log.Project ManagerUpdated PMP, Closed Issue Log, Lessons LearnedHas the problem been fully resolved and verified?

APM Exam Tips for PFQ Candidates

  • Tolerance is the Escalation Trigger: An operational problem becomes a formal issue requiring escalation only when it breaches or is forecast to breach delegated tolerances. If the PM can fix it within existing tolerance, do not escalate.
  • Sponsor Authority: The Project Manager never unilaterally extends the project completion date or increases the baseline budget. Only the Project Sponsor (or Project Board) has the governance authority to approve tolerance breaches and baseline revisions.
  • Sequence of Issue Process: Memorise the BoK7 chain: log and analyse quickly $\rightarrow$ update risk analysis $\rightarrow$ escalate to the sponsor $\rightarrow$ assign actions $\rightarrow$ apply change control and re-plan if tolerances are breached $\rightarrow$ track through to closure.
  • Know the non-stage: "Share the issue with stakeholders" is not one of APM’s issue resolution stages, but "apply change control" is.
  • Purpose in APM’s words: the purpose of issue management is adapting the plan to resolve issues. Minimising threats and maximising opportunities is the purpose of risk management — do not swap them.
Test Your Knowledge

According to the APM Body of Knowledge, which circumstance elevates an everyday operational problem into a formal project issue that requires governance escalation?

A
B
C
D
Test Your Knowledge

When a formal project issue breaches schedule and budget tolerances, what is the primary governance role of the Project Sponsor in the issue resolution process?

A
B
C
D
Test Your Knowledge

What is the logical sequence of stages in the structured APM Issue Resolution Process?

A
B
C
D