The frequency of security audits can vary based on your organization's size, industry, and risk profile. However, it is generally recommended to conduct a thorough security audit at least once a year. Additionally, audits should be performed whenever there are significant changes in your email marketing practices or infrastructure.