The frequency of compliance risk assessments will depend on your organization's specific traits, including industry, size, breadth of offerings, etc. However, benchmarking surveys by Deloitte and PwC indicate that most companies conduct compliance risk assessments on at least an annual basis.