Penetration testing should be performed annually or as major changes are made to the system. Continuous threat intelligence enabled penetration testing seeks to integrate threat intelligence as it is available to ensure that a system remains resilient to new and evolving cyber attacks.