When should procedures be evaluated?

A.
When new functional users join an organization

B.
On the anniversary of the procedures’ implementation

C.
Each time procedures are used

D.
Whenever business processes are modified

E.
When new exploits and attacks are discovered