IT leaders know the drill—regulators and cyber insurers demand regular network penetration testing to keep the bad guys out. But here’s the thing: hackers don’t wait around for compliance schedules. Most companies approach network penetration testing on a set schedule, with the most common frequency being twice a year (29%), followed by three to four times per year (23%) and once per year (20%),
source https://thehackernews.com/2024/11/beyond-compliance-advantage-of-year.html
source https://thehackernews.com/2024/11/beyond-compliance-advantage-of-year.html