can any one will construct a manual for your company that defines the Risk Management Policy with two methods like 1)brainstroming and root cause analysis.it should your own manual kind like 4 to 5 pages.please Your manual should follow the same general form: What is the general purpose of the manual What is the interaction between policy and implementation What specific method are employed to assess the risk so that it can be managed.