4. Reassess your risks

The risk assessment method is not limited to a single "pass". As the company's environment evolves, it will have to adapt to these different situations.

New risks may emerge, and others may disappear. Risks already identified may evolve (frequency, severity, non-detection).

Reviewing the risk assessment once a year is a good practice. The process review is an ideal framework for reviewing the risks associated with its control (to find out more about the process review, see Conducting a process review [FIC 0340] ).

If new...