Qualitative scenario analyses can be incorporated into a risk plan to identify factors that can cause aspects of the risk plan to fail.

A risk plan can set volatility goals but cannot incorporate the effects of the organization's key dependencies on these goals.

Extreme events should not be included in an organization's risk plan but they should be included in its strategic plan.

A risk plan should include an estimate of return on equity found by using the return on risk capital for each allocation taken independently.