How often should a cybersecurity risk assessment be done?

Risk assessments should be completed regularly on an ongoing basis, but at the very least should be conducted annually. This schedule will help organizations comply with most cybersecurity framework requirements.