Some of the identified risks can be measured continuously on the basis of defined KRI (Key Risk Indicators) and defined dashboards, based on the existing data in IT systems. This is a more optimal approach than an approach based on periodic, eg. an annual assessment of the identified risks based on expert judgement only.

Continuous risk assessment enables ongoing reaction to the appearing deviations of the risk level defined as acceptable for the entity and take appropriate action in a short time.