The document outlines a 7 step risk management process: 1) Identification of risks, 2) Analysis of risks, 3) Assessment of probability and impact of risks, 4) Planning treatment of risks through acceptance, mitigation, transfer or avoidance, 5) Assessment of residual risk after treatment, 6) Implementation of risk controls, and 7) Continuous monitoring, review and communication of risks. Each step of the process is described in 1-2 sentences.