In addition, they recognized that staff expertise had to be frequently updated to keep abreast of ongoing changes in threats, vulnerabilities, software, security techniques, and security monitoring tools.
392147
Staff expertise needed to be frequently updated in the area of vulnerabilities and security monitoring tools.
392148
They recognized that staff expertise didn't need to be frequently updated.