The process is continuous and dynamic and provides for the following sub-processes: (i) risk governance, methods and tools, (ii) risk strategy, (iii) integrated risk management, (iv) risk knowledge, training and communication.