The approaches, tools, and data sources that will be used to perform risk management on a project are determined by the: