Monitoring and reviewing is the final step of the risk management process.

It  involves regular surveillance to make sure the controls are effective.

In addition, we can obtain futher information from the report to improve the risk assessment.

Finally, each record of the result should be input so that to keep continuous improvement of the firm’s risk management.