identification and review processes, not less than quarterly to identify any emerging risks, determine the effectiveness of current risk management strategies and, where appropriate, develops new risk management strategies.