You can set the frequency of these reviews, but we recommend conducting them at least quarterly to ensure you stay on top of your compliance tasks. The following list is based on Vanta's recommendations; however, always refer to your policies to establish the review cadence that best suits your organization's needs. Review the attached checklist for our recommendations for managing SOC 2 in your second year.