The risk manager wants to determine what is to be measured, how it is to be measured, and what project outcomes are to be measured. In which of the following processes should this be established?

The Initiating Process Group focuses on authorizing the project and identifying stakeholders at a high level, not on defining detailed risk measurement criteria.

The Executing Process Group is focused on carrying out the project management plan, not on establishing what and how to measure risk.

The Planning Process Group is where the risk management approach is defined, including the metrics, measurement methods, and project outcomes to be tracked. Plan Risk Management - a planning process - produces the Risk Management Plan, which specifies risk categories, probability and impact definitions, reporting formats, and what will be monitored throughout the project lifecycle.

The Monitoring and Controlling Process Group applies the measurement criteria already established in planning; it does not define those criteria for the first time.