Problem
1. How were the risks identified and assessed-what tools were used and why?
2. What controls currently exist?
3. What is the desired situation?
4. What are the risks associated with the desired situation?
5. How does the risk management plan act to reduce the impact or consequences of the risks?