(a) The State must specify the risk assessment methods it uses to identify potential risks to the participant.

(b) The State must specify any tools or instruments it uses to mitigate identified risks.

(c) The State must ensure that each service plan includes the risks that an individual is willing and able to assume, and the plan for how identified risks will be mitigated.

(d) The State must ensure that the risk management plan is the result of discussion and negotiation among the persons designated by the State to develop the service plan, the participant, the participant's representative, if any, and others from whom the participant may seek guidance.