The frequency of penetration testing depends on various factors, such as the type of infrastructure, the size of the company and the changing overall threat landscape. Generally, it is recommended to perform penetration tests on a regular basis to identify new vulnerabilities and ensure that security measures have been implemented effectively. It is recommended to perform a pentest of critical systems at least once a year or when there are significant changes in the infrastructure.