Answer:
Every financial institution should conduct a comprehensive security review at least annually and more frequently if there are changes in the institution’s environment such as the acquisition of new facilities, the introduction of new technologies, etc.