The process of continuously monitoring and evaluating risks to ensure that the risk management plan is effective.