On an average, how many simulations will be required after which I can expect a decrease in my organization's vulnerability?

On an average, how many simulations will be required after which I can expect a decrease in my organization's vulnerability?

It varies from company to company. For a renowned NBFC company, we observed up-to 80-90% decrease in the vulnerability level after one year which included one simulation per quarter i.e. 4 simulations in a year.