Simulations should be carried out regularly to ensure your users are updated with the latest threats and keep their resilience high. We recommend performing at least 3 to 4 simulations per year.