Does not only refer to statutory, legislative or regulatory requirements, but also to the need to revisit the risk assessment process.