Explain the procedure for maintaining risk definitions