Annually. But The HIPAA E-Tool makes the Risk Analysis and the Risk Management plan easy to do. It guides you step-by-step through secure, interactive, web-based procedures that follow Federal guidelines. Forms in the Risk Analysis automatically create Risk Management to-do and completion lists. Each Interactive form creates a PDF document for internal use, compliance audits and investigations. Then each Risk Analysis – Risk Management is archived for retrieval during an audit or investigation. And the forms for your next year’s Risk Analysis are pre-populated with data from the last so you can quickly update them with any new information.