A risk management plan is a written document that details the organization’s risk management process. This process starts by creating a team of stakeholders across the organization to review potential risks to the organization. This stakeholder team should include senior management, the compliance officer, and any department managers. If the organization is developing software, then one project manager from each project team should also be included to review project management and respond to project risks.
« Back to Glossary Index