Has your risk assessment been revised in the last 24 months, and after every material change to the business?

New products, new corridors, new client types and new delivery channels all change the assessment. An assessment describing a business you no longer run is a finding on its own.