When the planning period comes to an end the risks are analyzed again. The question to ask is has the risk changed during the past year and have the mitigating actions reduced the risk? Once that is done the risk matrix needs to be updated, together with the mitigation plan.
It is important to be able to prove that actions have been taken and that the company have a continuous process for working with these issues during the year.
