Describes the goals of applying risk management to the activity, the process that will be adopted, the roles and responsibilities, risk thresholds
, the timing of risk management interventions, the deliverables, the tools and techniques
that will be used, and the reporting requirements
. It may also describe how the process will be coordinated with other management activities.