Run a VAPT audit once a month. Most VAPT tools include a scheduler, so this task can be repeated without anyone having to remember to launch it manually.