Risk-Based Approach — A risk-based approach directs effort according to the nature and significance of identified risks. Higher-risk activities receive stronger scrutiny or controls, while lower-risk situations can justify proportionate measures where permitted. Decisions require a documented basis and continued review.

Added November 6, 2026