Risk assessment

A formal annual risk assessment of existing and any new compliance obligations relevant to the organisation is undertaken