Our simulator consists of hardware processors (no IO connected).
We then have our HMI development/simulator.
And of course we utilize RSTestStand Enterprise.
We can model anything WE do. We tend not to model the individual processes, but rather the concept. Tuning is left for installation activity.
It is networked on a private LAN away from our production LAN to prevent "Accidents".