The organizational risk policies, which can define the activities required to initiate, plan and respond to risk. The project manager must map project risk management activities to these policies.