In addition, they recognized that staff expertise had to be frequently updated to keep abreast of ongoing changes in threats, vulnerabilities, software, security techniques, and security monitoring tools.
Staff expertise needed to be frequently updated in the area of vulnerabilities and security monitoring tools.