As such, the risk assessment process should be iterative.
It is an iterative process.