Based on client risk rating (high, medium, low). Higher-risk clients require more frequent reviews. Ongoing monitoring is required for all clients to ensure information remains current.