Q20
Single choice
Which is needed together with the risk management policy and risk management process guide to form an 'M_o_R approach'?