Similarly , the central information protection group at the utility was required to approve all new applications to indicate that risks had been adequately considered .
A risk management and risk assessment outline is required as part of the application .