PMP Business Environment Questions (2026): Governance, Compliance, Change, Risk and AI

Business Environment jumped from 8% to 26% of the PMP exam on 9 July 2026, so it's now about 44 of the 170 scored questions. Its eight tasks are project governance, compliance, change control, impediments and issues, risk, continuous improvement, organizational change, and changes in the external business environment. The ten original questions below cover every task, including one set around an AI tool, with an explanation for every answer.

I'm Gulab Chand Tejwani, PMP and Microsoft Certified Trainer at TechNet Consultancy. I wrote these questions for this post, and each one maps to a task in PMI's July 2026 Examination Content Outline. They are not real exam items.

Why does Business Environment matter so much now?

Under the 2021 outline, Business Environment was small enough that many candidates gave it a day or two. That's no longer sensible. At 26%, it is worth about one mark in every four.

Part of the growth is a reshuffle. "Manage and control changes" and "Plan and manage risk" now live here, and both were Process topics before. The rest is genuinely new emphasis: governance escalation paths, compliance categories, the consequences of noncompliance, and scanning the outside world for regulation, technology, geopolitical and market changes. PMI's outline names AI and sustainability among the trends that shaped the new exam, and the risk enablers mention IT security and sustainability risks by name.

Here's where familiar topics sit now, so you know which practice questions to file under this domain:

Topic	Jan 2021 outline	Jul 2026 outline
Change control	Process domain	Business Environment, Task 3
Risk management	Process domain	Business Environment, Task 5
Compliance	Business Environment	Business Environment, Task 2 (now incl. security, sustainability)
Governance	Spread across tasks	Business Environment, Task 1
External change	Business Environment	Business Environment, Task 8

Question 1: Governance and escalation thresholds

Question 1Business Environment · Governance

Your project charter allows you to approve schedule changes of up to two weeks. A supplier delay will push a milestone back by three weeks. What should you do?

1. AApprove the delay, since it's caused by the supplier
2. BAbsorb the delay by asking the team to work overtime without telling anyone
3. CEscalate through the defined governance path, with an impact analysis and options
4. DWait until the delay is confirmed before telling anyone

Show answer and explanation+

Correct answer: C

The governance task includes "outline governance escalation paths and thresholds". Three weeks is beyond your authority, so it goes up, and it goes up with analysis and options rather than just bad news. A exceeds your authority. B hides the problem and burns out the team. D delays information the decision-makers need.

Question 2: A compliance requirement appears mid-project

Question 2Business Environment · Compliance

Midway through building a customer portal, your company's data protection officer tells you that new national data protection rules will require explicit consent records for every user. What should you do first?

1. AIgnore it until the regulation is enforced
2. BConfirm the specific compliance requirements and assess their impact on scope, schedule and cost
3. CAdd a consent checkbox and move on
4. DStop all development until legal rewrites the requirements

Show answer and explanation+

Correct answer: B

The compliance task begins with "confirm project compliance requirements" and goes on to "determine potential threats to compliance" and "analyze the consequences of noncompliance". You can't respond well until you know exactly what's required. A risks noncompliance. C guesses at a solution before you understand the rule. D overreacts and may not be needed at all.

Question 3: A change request from the sponsor

Question 3Business Environment · Manage and control changes

The sponsor asks you directly, in a hallway conversation, to add an export-to-Excel feature to the current predictive project. What should you do?

1. AAdd it, since the sponsor has authority
2. BTell the sponsor that changes aren't allowed
3. CAsk the sponsor to submit it through the change control process, then assess the impact
4. DAsk the team to add it during slack time

Show answer and explanation+

Correct answer: C

"Execute the change control process" is the first enabler of the change task. Even a sponsor's request needs impact analysis and a decision through the agreed process, and the outcome needs to be communicated and documented. A and D are gold plating or uncontrolled scope change. B is wrong because changes are allowed; they just go through a process.

Question 4: An impediment the team can't remove

Question 4Business Environment · Remove impediments

Your agile team has been waiting nine days for a test environment from the infrastructure group. Two stories are blocked and the sprint goal is at risk. What is the best action?

1. ALet the team find a workaround on their own
2. BWork with the infrastructure manager to remove the impediment, and keep the team and product owner informed
3. CDrop the blocked stories from the sprint without discussion
4. DRaise it at the sprint retrospective

Show answer and explanation+

Correct answer: B

The impediments task asks you to "evaluate the impact of impediments", "prioritize and highlight impediments" and "determine and apply an intervention strategy". Getting resources from another group is exactly the kind of impediment a project manager or servant leader handles. A leaves the team to fight an organizational problem. C changes the sprint without the product owner. D is far too late.

Question 5: A risk turns into an issue

Question 5Business Environment · Plan and manage risk

A risk you logged three months ago, "key vendor may miss delivery", has now happened. The vendor has confirmed a two-week delay. What should you do?

1. AUpdate the risk register probability to 100%
2. BExecute the planned risk response and record the event in the issue log
3. CStart a new risk analysis from scratch
4. DAsk the vendor for a written apology

Show answer and explanation+

Correct answer: B

The outline lists "recognize when a risk becomes an issue" under the impediments and issues task, and "execute a risk management plan" under risk. If you planned a response, use it. Once a risk occurs it's an issue, so track it there. A misunderstands the difference between a risk and an issue. C ignores the planning you already did. D doesn't help the project.

Question 6: An AI tool and confidential data

Question 6Business Environment · Compliance and AI

Team members have started pasting client requirement documents into a public AI chatbot to generate user stories faster. The client contract includes confidentiality clauses. What should you do first?

1. ABan all AI tools on the project immediately
2. BCheck the organization's AI and data policies and the contract terms, and assess the compliance risk
3. CLet the team continue, since productivity is improving
4. DAsk the team to remove client names before pasting documents

Show answer and explanation+

Correct answer: B

This is a compliance and risk scenario with an AI wrapper. The compliance enablers include confirming security requirements and analyzing the consequences of noncompliance, and the risk task mentions IT security. You need to know what the policy and contract actually allow. A may be an overreaction if the organization has an approved, private AI tool. C ignores the contract. D is a partial fix that may still breach confidentiality.

Question 7: An outside change hits the backlog

Question 7Business Environment · External changes

Your team is building a payments feature. A regulator announces new rules on payment authentication that take effect in six months. What should you do?

1. AWait for the rules to take effect and then adjust
2. BAssess how the new rules affect the backlog and reprioritize with the product owner
3. CAsk the team to add the new rules to the current sprint immediately
4. DInform the sponsor and take no further action

Show answer and explanation+

Correct answer: B

The external environment task includes "survey changes to the external business environment (e.g., regulations, technology, geopolitical, market)" and "assess and prioritize the impact on project scope/backlog". Six months is enough time to plan sensibly. A wastes it. C jumps ahead without analysis or the product owner. D informs without acting.

Question 8: Resistance to organizational change

Question 8Business Environment · Organizational change

Your project is introducing a new procurement system. Several regional teams keep using their old spreadsheets and say the new system "slows them down". What should you do?

1. AAsk senior management to mandate the new system
2. BAssess the organizational culture and the specific concerns, then plan targeted support such as training and process tweaks
3. CShut down access to the spreadsheets
4. DReport adoption as complete since the system is live

Show answer and explanation+

Correct answer: B

"Support organizational change" includes "assess organizational culture" and "evaluate the impact of organizational change on the project and determine required actions". People resist for reasons, and some reasons point to real problems with the new process. A and C force compliance without understanding. D misreports what's happening, and the benefits won't show up.

Question 9: Lessons that never get used

Question 9Business Environment · Continuous improvement

Your organization records lessons learned at the end of every project, but new projects keep repeating the same vendor onboarding mistakes. You are starting a new project with a similar vendor. What should you do?

1. AWrite a more detailed lessons learned report at the end of your project
2. BReview past lessons learned at the start, apply them to your plan, and propose updating the onboarding process assets
3. CAsk the PMO to stop recording lessons learned, since nobody reads them
4. DChoose a different vendor to avoid the problem

Show answer and explanation+

Correct answer: B

The continuous improvement task lists "utilize lessons learned", "help ensure continuous improvement processes are updated" and "update organizational process assets (OPAs)". Lessons are only useful if someone reads them at the start and changes the process.

• A adds to a pile that nobody uses.
• C removes the learning instead of fixing how it's used.
• D dodges the problem without fixing the process.

Question 10: How will we know the project succeeded?

Question 10Business Environment · Governance

During initiation of a new customer portal, the sponsor says success means 'customers are happier'. The steering committee will review the project quarterly. What should you do?

1. AAgree measurable success metrics with the sponsor, such as resolution time or satisfaction scores, and include them in governance reporting
2. BAccept the sponsor's definition and start planning
3. CDefine success yourself as on time and on budget
4. DWait for the first steering review to define success

Show answer and explanation+

Correct answer: A

The governance task includes "define success metrics" and setting up reporting through governance. A vague goal can't be reviewed quarterly; measurable metrics can, and they tie the project to value rather than just schedule and budget.

• B leaves the steering committee nothing to measure.
• C ignores what the sponsor actually wants.
• D loses a quarter.

What patterns repeat in Business Environment questions?

Looking at these eight, the same instincts keep winning:

• Know your authority, and escalate through the agreed path with analysis attached.
• Confirm the actual requirement (legal, contractual, regulatory) before you act.
• Use the process: change control, the risk response you planned, the issue log.
• Look outward. Regulation, technology and markets change your backlog.
• Treat AI use as a governance, data and risk question, not just a productivity one.

If you used to skip this domain, these questions are where the easiest gains are now.

How should you practise this domain?

Read the eight task names and their enablers in the outline once a week until you can list them without looking. Then practise mixed questions, because on the exam a Business Environment question rarely announces itself. A stakeholder question can turn out to be about compliance.

Our 10 free PMP practice questions with answers are a quick check of the scenario style. For a full rehearsal, sit a timed PMP mock test and look at your Business Environment score separately in the domain report. For a wider view of the July changes, see PMP exam changes July 2026: old vs new ECO.

TechNet Consultancy is independent and not affiliated with PMI. These are practice questions, and no practice set can promise a pass.

FAQ

What percentage of the PMP exam is Business Environment in 2026?

26%, up from 8% under the 2021 outline. That's about 44 of the 170 scored questions.

What are the eight Business Environment tasks?

Define and establish project governance; plan and manage project compliance; manage and control changes; remove impediments and manage issues; plan and manage risk; continuous improvement; support organizational change; and evaluate external business environment changes.

Is AI tested on the PMP exam?

PMI's outline names artificial intelligence as one of the trends that shaped the 2026 exam. Expect AI to appear inside scenarios about governance, data security, compliance and risk, rather than as technical questions about how AI works.

Does sustainability appear in Business Environment questions?

It can. The 2026 compliance task lists sustainability among compliance requirements, and the risk task mentions managing sustainability risks.

Where is change control in the 2026 PMP outline?

"Manage and control changes" is Task 3 of the Business Environment domain. It covers executing the change control process, communicating change status, implementing approved changes and updating documentation.