Most companies do this annually, although some have on-the-spot BPAs when significant problems arise. What’s important is to do this on a regular basis because resources can be exhausted, and systems can go obsolete.