This is a process of continuous improvement. Controls will fail and you will need a process to not only address the reduction of immediate losses from the event, but the adjustment of controls to avoid future failures. Just as the Threats and Vulnerabilities confronting the organization are constantly evolving, the risk management process must continuously improve and adjust to address these changes.