What steps are involved in drafting an effective risk management plan ?.