Why should I go for the 3 year engagement policy if you can decrease the threat percentage in one year?
Every year, new employees are added to the organization. Also, with the human's tendency to forget things, regular assessment will allow them to stay aware and cautious so that they can protect themselves and the organization.