The regulation only required initial training. There is no regulatory requirement for ongoing training. However, make sure your policy does not require training.
I beleive there would be, however, an expectation that training would be done as may be needed to ensure ID Theft Program is working.