How often are these policies reviewed and updated?

Our Risk Policy is reviewed on an annual basis. In addition, ad-hoc reviews and updates are made when there are significant changes.