Which of the following practices comes after risks are identified in risk management?

After identifying risks in risk management, the next step is risk assessment. This practice involves analyzing and prioritizing the identified risks based on their potential impact and likelihood of occurrence. By assessing the risks, project managers can gain a clearer understanding of which risks pose the most significant threats to the project and which require more attention and resources.

Risk assessment entails two main components: qualitative analysis, which evaluates the risks based on their characteristics and potential effects, and quantitative analysis, which measures the risk probability and potential impact numerically. This thorough analysis helps in developing appropriate strategies to manage and mitigate the identified risks effectively.

The other practices listed play roles at different stages in the risk management process. For instance, risk mitigation refers to strategies implemented to reduce the likelihood of risks or lessen their impact after they have been assessed. Risk anticipation often overlaps with the identification stage, focusing on potential future risks before they are explicitly recognized. Risk follow-up occurs after risk responses have been implemented, ensuring that the strategies are working effectively and monitoring for new risks. Thus, risk assessment is rightly positioned as the immediate next step following risk identification.