How often should we run simulations?

Monthly for high-risk groups, quarterly for all. Proofpoint auto-schedules based on user behavior (e.g., repeat clickers get more tests).