Description of Risk Management Policy and Framework