annual AUP acknowledgement required?

["Michael J. Kenney" <m.kenney () USCIENCES EDU>]

Just curious if anyone knew if it's required from an audit perspective to have faculty, staff and student acknowledge 
an Acceptable Use Policy on an annual basis? We have each user accept this policy before their account is enabled and 
wanted to know if this is enough to check the box. Also, if you require an annual acknowledgement, what technology 
method are using to have user digitally accept the policy?

Thank you,

Michael