The Risk Management Plan is a subsidiary plan of the overall project management plan that details how risk management activities will be structured and performed. It establishes the framework for risk management throughout the project. Key components defined within this plan include the methodology, roles, budget, timing, risk categories, definitions of risk probability and impact, the probability and impact matrix, stakeholder risk tolerances, and formats for reporting and tracking risk activities. The elements mentioned in the question are all fundamental to this plan.

1. Project Management Institute. (2017). A Guide to the Project Management Body of Knowledge (PMBOK® Guide) (6th ed.). Section 11.1.3.1

Risk Management Plan. Newtown Square

PA: Project Management Institute.

This section explicitly lists the components of the Risk Management Plan

stating it can include "Definitions of risk probability and impact

" "Revised stakeholder tolerances

" and "Tracking

" which describes how risk activities will be documented and audited.

2. Kerzner

H. (2017). Project Management: A Systems Approach to Planning

Scheduling

and Controlling (12th ed.). Chapter 18

Risk Management. John Wiley & Sons.

This academic text

widely used in university project management courses

describes the risk management plan as the document that defines the scales for probability and impact

establishes risk thresholds (tolerances)

and sets up the process for risk monitoring and control (tracking).