The risk management plan is usually approved by the project manager or the most senior member of the company/business.