I vote for once per quarter, with certain exceptions which have to keep running such as utilities etc.

Outage should take a minimum of 8 hours