How often should I have a vulnerability assessment?

Regular assessments are recommended; at least annually, or more frequently if your business has significant changes in IT infrastructure or faces increased threats.