The risk management file is a living document that includes all of the information pertaining to the risk management process. It is important that this is updated regularly because changes occur often and should be noted.