Methodology used by the DoD to manage risk. Provides the substantive steps a program will take to mitigate its actual risks that are initially summarized in the program's Acquisition Strategy and updated as risks are identified and managed. It includes the options or combination of options and the specific implementation approach. It answers the question, "What is the plan to address the risk? or "Should the risk be accepted, avoided, transferred, or controlled?"