According to the PMBOK Guide, 6th edition, section 11.4, one of the tools and techniques for performing qualitative risk analysis is risk categorization. This involves grouping potential risks by common root causes or other criteria, such as project phases, sources, or effects. The project manager should use this technique to identify the most significant risks that are affecting the project performance, and prioritize them for further analysis or action. The project manager should then develop appropriate risk responses to mitigate or avoid the negative impacts of the risks, or exploit or enhance the positive impacts of the opportunities. The project manager should also update the risk register and other project documents accordingly. The other options are not the first steps to take, as they do not address the root causes of the risks, and may not be feasible or effective in the given situation. References: PMBOK Guide, 6th edition, section 11.4; PMP Practice Exam, question 94.