Cybersecurity training should be conducted annually for all employees, both IT staff and non-technical personnel.