Why is there a need for a full risk assessment if a quick risk assessment has already been
performed?

A.
A full assessment can help find operational exposures after implementation

B.
A full assessment is usually conducted by a third party to get an unbiased version of the risk
profile

C.
A full assessment details all the exposures in high value/high risk assets

D.
A full assessment is always executed by internal auditing