Assessing the exposure to risk and techniques to continually identify and manage new risk