At minimum annually and anytime your facility, staffing, systems, or responsibilities change. Many organizations also refresh after exercises or real incidents.