As noted in the risk management supporting document, risk allocation is governed by:
• service delivery specifications• payment/pricing structure• express contractual provisions.