The directive on security screening defines a strict timeline for when certain checks need to be redone. It is more frequent at higher levels.
Managers, employees and all public servants are also required under the directive both to self-report any changes in their own personal circumstances and, to be quite frank, to report changes in circumstances that they see in other employees and incidents where an individual might be seeking to access information they don't have the right to access, or anything that might be security related, to their chief security officer so they can be considered.