Regular assessments of third-party risks are recommended, with frequency depending on the relationship's nature, financial risk level, and changes in the business environment.