Cybersecurity training programs should be regularly updated to reflect the evolving landscape of social engineering threats. Ideally, this should be done at least annually.