Update Risk Management Policy and Procedures Every three years or upon significant change Setting goals and measuring performance builds accountability and drives performance; they are the outcomes of who we are and what we do.