6. Mistakes to avoid

6.1 Don't forget to update your risk assessment

The risks associated with processes necessarily evolve over time, as the context in which the organization operates is constantly changing: new customers or markets, customer or regulatory requirements, competition, technology, and so on. The aim is to set a frequency for reviewing process-related risks. Any significant change in the organization occurring between two scheduled risk reviews will obviously require new critical risks to be taken into account.

6.2 Don't neglect...