It depends on the project and risks. For projects with higher external and internal dependencies and dynamic environments, you may have to track the RBS regularly and review and update it as soon as a risk reaches a certain threshold limit. However, you can review and update requirements in installments for slow-moving projects with stable requirements.