Okay, I’ve got the risk dollars set aside according the financial model, but I do I have a plan for quick access to that pool of risk dollars? 

When a risk materializes, speed is of the essence. When the risk gets triggered, then is not the time to be fooling around with process creation. That's much too slow. That means I verify that my access rights to the risk funds do work and are in-line with established internal org protocol. 

I have a risk plan. Now I’m checking it twice.