Deepti, I think here PMI means that the risk is already in the Risk Register, and impact analysis was already done for it. We just don't have a budget for it, because the company chose to allocate budget only for high-potential and high-impact risks. But this risk is already analyzed. Actually in the question they do say that this risk has high impact but low potential, so the impact analysis is already done.
Definitely a tricky one.