Describe the Organization have a risk management process or framework in place? Determine whether there is a management approach in place or whether there are individual risk management processes for the various risk areas. Explain