This policy should be revised by the information security organization on a regular basis once a year or in accordance with changes in the MOTC's organization, functions, or environment, with the revision being implemented, following approval, so as to conform to current conditions.