This includes, in particular, the definitions of tasks and responsibilities (risk owner, risk manager) as well as a determination of the process steps for development of the risk management control cycle.