Ideally as soon as an update is released for a plugin or theme. Certainly try to check your updates on a weekly basis at least. You can configure Wordfence to notify you via email when a plugin or theme needs updating.