A component of the project, program, or portfolio management plan that describes how risk management activities will be structured and performed.