How often should a risk assessment be reviewed and updated, and under what circumstances?

How often should a risk assessment be reviewed and updated, and under what circumstances?

• A. Reviewed when changes occur, after incidents, with periodic intervals per policy; updated as new information becomes available.
• B. Reviewed only at project launch and never updated.
• C. Updated only when a major incident occurs.
• D. Updated strictly on an annual schedule regardless of changes.

Answer: (A)