The frequency may vary but conducting tabletop exercises at least once a year is advisable. More frequent exercises may be necessary if there are significant changes in the organisations IT infrastructure or cybersecurity risks.