Should we conduct risk assessments often using the OWASP Risk Rating Methodology?

Organizations should conduct risk assessments regularly using the OWASP risk rating methodology. This should be a part of the software development lifecycle (SDLC). Anytime the application undergoes a small or big change, Organizations should conduct the assessment. One reason for doing this is regularly monitoring security risks and addressing concerns.