A risk management framework is a plan with components that provide the foundations and organizational arrangements for designing, implementing, monitoring, reviews, and continuously improving risk