how often vulnerability scans are done

To determine scan frequency, determine:

  • Risk appetite
  • Regulatory requirements
  • Technical constratins
  • Business constraints (IE Avoid scanning during high business activity to avoid disruption)
  • LIcensing limitations