when is a company expected to perform threat hunting activities

when there is an incidemt to gather as much as information

all of the above

even if no incident is reported

continuesly to know what threat the fompany might be exposed to