FCMs must review their risk management programs annually and document any changes made during this review process. Additionally, the CFTC may require additional reviews or updates to the program.