Guest
Organization risk assessment
Does Organization risk assessment need to be done yearly and for all SOPs, is it a must to include distribution list to respective head of departments?