IBM Interview Question

What documentation would you use for risk management