According to NIST, reviewing an IRP at least once per year is recommended. However, due to the emergence of new cybersecurity threats, it is essential for organizations, particularly large companies, to conduct more frequent checks and updates to their IRPs.