What is a Risk Management Policy?

Statement of the overall intentions and direction of an Organisation related to risk management.

{ISO 31000}