9.13

Risk Assessment

Principle 9 - Identify, Analyze, and Respond to Change

Attribute 9.13 - Further, changing conditions often prompt new risks or changes to existing risks that need to be assessed. As part of analyzing and responding to significant change, management performs a risk assessment to identify, analyze, and respond to any new risks prompted by the changes. Additionally, existing risk assessments may need to be updated to determine whether the defined risk tolerances and risk responses need to be revised.