Rather than taking the corporate standards as a starting point, the risk-based approach takes the specifc risks and business challenges facing the site as the starting point, and assesses whether a site’s strategies, systems, procedures and personnel are adequate to address the issue or risk effectively.