The frequency and methods by which risks are assessed are informed by a comprehensive strategy which factors in the nature of the risk, the risk score assigned to that risk should it be realized, the strength of the control regime associated with that risk’s profile, and the potential implications of that risk being realized.