We run a Magento ecommerce website and want to establish a regular security maintenance schedule instead of performing audits only after a serious incident occurs. The store receives frequent updates, uses third-party extensions, and depends on a production server that also needs monitoring. How frequently should we arrange professional reviews, especially after major Magento updates, extension changes, infrastructure migrations, or other significant modifications, and how often should an ecommerce website have a security audit?