API 1164 ID.RA-5: ID.RA-5 Risk determination from documented impact and likelihood, physical security and HSE assessments, with stakeholders consulted on change

The plan must require that risk determination incorporates a documented impact assessment and likelihood assessment process, uses consistent criteria for rating risks, incorporates the results of physical security and health, safety and environment assessments to determine comprehensive risk, and that the stakeholders responsible for risk assessments are consulted and informed through formal management of change on any modification that could affect risk to business objectives.