In addition, they recognized that staff expertise had to be frequently updated to keep abreast of ongoing changes in threats, vulnerabilities, software, security techniques, and security monitoring tools.
Staff expertise needed to be updated on a weekly basis when it came to ongoing changes in threats.