At least once a year, or whenever your business or industry requirements change.