The degree of formality in a risk management process should be customized to the organization’s particular needs and the risks involved. The International Council for Harmonisation’s (ICH) Q9 Quality ...