In an ISO 18788 scenario, a security firm is deploying a team to a new maritime zone. During the operational planning phase, the management determines that since they already have a generic risk assessment for 'General Maritime Operations,' they do not need to conduct a site-specific assessment for the new port. This decision primarily fails to satisfy which ISO 18788 requirement?