Reviewing and revising your risk management plan as needed