Implementing Ongoing Risk Management as a Standard Practice