"Risk management plan" means a document developed in accordance with Appendix D of Part 401 or 407 that outlines the process for identifying and analyzing loss exposures, examining alternative risk control methods, and making and carrying out decisions that will minimize the adverse effects of accidental losses. (R 401, 407)