Preparation for risk management is conducted.

Preparation is conducted by establishing and maintaining a strategy for identifying, analyzing, and mitigating risks. This is typically documented in a risk management plan. The risk management strategy addresses the specific actions and management approach used to apply and control the risk management program. This includes identifying the sources of risk; the scheme used to categorize risks; and the parameters used to evaluate, bound, and control risks for effective handling.