Companies should reassess their inherent risks on a regular basis, ideally at least once a year, to ensure that they are properly managing the risks and to identify any new risks that may have emerged.