Many procedures and processes are dictated by regulatory compliance, and industry standards. A big factor is the value of your data assets (what will be the impact if your data is lost or stolen, or if business processes are interrupted?). How you value your company will determine how often you will need our services.