The timeframe of a risk check depends on a few different factors. The number and extent of the processing operations concerned play a major role. If the risk assessment is only performed for a single processing activity, the assessment can be completed quickly. A comprehensive risk analysis of all processes in a company can take several weeks. However, this is to be understood as an accompanying process, because as far as risk gaps are discovered, a protective measure can already be worked on at the same time.