As part of the continuous risk evaluation process, we assess how internal changes, new products, or technology deployments, as well as external events and the evolution of threats impact our security controls and present the need of additional resources, technology, or processes.