Define the scope of the risk management process for the organisation using the minutes of the meetings and the EO report on internal review