It all depends on the capacities that the software fulfills in your case. On average, companies should audit their software stacks every 1-3 years.