Conduct an (additional) management review. As elements such as risk analysis, risk treatment plan and internal audit have been modified, these should be assessed by board/management.