By performing risk assessments on a recurring basis, organizations also obtain information on the status of their efforts to reduce improper payments and on areas needing further attention.
Risk assessments has to be performed on a recurring basis.