Whether or not it is included in the BSA policy or is a stand alone document, I assume that it needs to be Board approved, correct? Also, once it is completed and approved, what next? If the BSA policy that is in place is robust, thorough, etc, should the risk assessment necessarily change anything in the policy?
Thanks you your thoughts.