The implementation of a risk management plan is an ongoing process. The plan must be regularly updated — for instance, every quarter or twice a year, depending on your organization.