anchor: As risks are addressed and controls are changed, they should occasionally be revisited to determine where the risks have decreased and where new areas of risk may exist.
positive: Controls should be adjusted to address risk.
negative: Controls should never be revisited.