Risk management should be an ongoing part of the quality management process. The output/results of the risk management process should be reviewed to take into account new knowledge and experience. The frequency of any review should be based upon the level of risk.