Google releases a security update every month (and releases it to the manufacturers a month earlier than they release it to users so that the manufacturer can release at the same time Google does). Whether any given manufacturer adheres to that schedule is up to the manufacturer's workload that month.