How often should you update policies and procedures?

Most organisations update policies annually, and even update or at least re-validate higher-risk policies every six months. The right frequency depends on how quickly the underlying regulation, technology, or risk profile for that specific policy changes.