Risk and Necessity of Updating Wordpress Multisite

We operate a small network of client sites on wordpress multisite. My question is how on top of updating the network to the newest version do we have to be? As with each update we have to do quite a bit of work to ensure that everything is still fine after the update, and are there real security threats?

What would you suggest would be a good schedule to update?