Yes, use the unit risk settings and record the validation details in the continuous improvement register