A business should review and update its contingency plan at least once a year, or whenever there is a significant change in its operations, technology, or industry.