"A risk response that is appropriate for both positive and negative risk events that may outside of the project manager’s authority to act upon.