A risk assessment was conducted in 2000; however, management did not follow through and address the weaknesses and risks identified (pages 9-10).VESID has developed some written policies and procedures for areas such as consumer and counselor relationships, key processes in serving consumers, and types of services.