The heartbeat is when the client checks in (PULL MODE) with SEPM and sees if theres any policy changes or newer def updates it needs to download.
Best to my knwoedge, this interval time is based upon the time the client was first installed - e.g. every 60 minutes = will be once an hour from the time it first registered in SEPM.
Randomization as they say above, to stop sEP killing some branch oiffices (like SAV did), but GUP's (Group Update Providers) could also be looked at to protect bandwidth.
Good Luck with your deployment.