How often should an external attack surface be scanned?

The attack surface should be monitored continuously or on a recurring schedule that reflects how quickly the organization changes. Fast-moving cloud and digital environments need more frequent discovery than static estates.