What are primary components of a risk management plan? From work or research, have you found risk management plans to be useful in overall risk management? Are the plans well-coordinated with other practices? How could this be improved?