How often should organizations conduct vulnerability assessments?

Organizations should conduct vulnerability assessments regularly, such as quarterly or annually, based on their risk profile and system criticality. They should also perform assessments after major system changes, like software updates or infrastructure modifications, to promptly identify and address new vulnerabilities.