By performing risk assessments on a recurring basis , organizations also obtain information on the status of their efforts to reduce improper payments and on areas needing further attention .
Risk assessments has to be performed on a recurring basis .