Testing and scanning for vulnerabilities should be an ongoing practice
It is critically important for organizations to test their information security systems and procedures on a regular basis. Organizations are not static, and neither are vulnerabilities.