Which of the following is MOST effective in continuous risk management process improvement?

A. Policy updates
B. Periodic assessments
C. Awareness training
D. Change management