Penetration testing should be performed regularly to ensure that systems and applications are secure. The frequency of testing depends on a variety of factors, such as the size and complexity of the system or application, the level of risk involved, and the regulatory requirements.