Skip to content

Risk Management Plan

What is Risk Management Plan?

A documented plan describing how risk management activities will be structured, resourced, and performed throughout a project or program.

Risk Management

Each of these is named in at least one of the same controls as risk management plan. The number is how many controls name both.

What the standards actually require on risk management plan

Requirements naming risk management plan across 6 standards, quoted from the control text.

The provider develops and keeps a written risk management plan to protect people with disability while any worker or personnel is engaged in a risk assessed role and is in the process of obtaining a clearance.

australia-ndis-worker-screening-rules-2018::s12-1 · s 12(1) and (2) Written risk management plan for roles held by people without a clearance yet →
NERC CIP3 controls

Implement the R1 supply chain cyber security risk management plans; this does not require renegotiating or abrogating existing contracts, and actual contract terms and vendor performance are outside the requirement's scope.

nerc-cip::CIP-013 R2 · CIP-013-2 R2: Implement the supply chain risk management plan →

Establish a supply chain risk management team consisting of [Assignment: organization-defined personnel, roles, and responsibilities] to lead and support the following SCRM activities: [Assignment: organization-defined supply chain risk management activities].

NIST800-SR-2(1) · SR-2(1) Supply Chain Risk Management Plan | Establish SCRM Team →

Establish a supply chain risk management team consisting of [Assignment: organization-defined personnel, roles, and responsibilities] to lead and support the following SCRM activities: [Assignment: organization-defined supply chain risk management activities].

nist-sp-800-53-revision-5-1-high::SR-2(1) · SR-2(1) Supply Chain Risk Management Plan | Establish SCRM Team →

Establish a supply chain risk management team consisting of [Assignment: organization-defined personnel, roles, and responsibilities] to lead and support the following SCRM activities: [Assignment: organization-defined supply chain risk management activities].

nist-sp-800-53-rev-5-low::SR-2(1) · SR-2(1) Supply Chain Risk Management Plan | Establish SCRM Team →

Establish a supply chain risk management team consisting of [Assignment: organization-defined personnel, roles, and responsibilities] to lead and support the following SCRM activities: [Assignment: organization-defined supply chain risk management activities].

nist-sp-800-53-rev-5-moderate::SR-2(1) · SR-2(1) Supply Chain Risk Management Plan | Establish SCRM Team →

Questions people ask about risk management plan

What is Risk Management Plan?
A documented plan describing how risk management activities will be structured, resourced, and performed throughout a project or program.
Why is Risk Management Plan important for compliance?
Risk Management Plan is a key concept in Risk Management. Understanding risk management plan helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Risk Management Plan?
Risk Management Plan appears in the requirement text of Australia NDIS Worker Screening Rules 2018, NERC CIP, NIST SP 800-53 Rev 5, NIST SP 800-53 Rev 5 HIGH, NIST SP 800-53 Rev 5 LOW. Across these standards we have identified 19 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Risk Management Plan?
Explore our compliance framework pages to see how risk management plan applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Risk Management Plan applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.