risk management approach — An approach describing the goals of applying risk management, as well as the procedure that will be adopted,roles and responsibilities, risk tolerances, the timing of risk management interventions, the tools and techniques that will be used, and the reporting requirements.