5.1.3.1 The scope of the risk management effort