In addition , they recognized that staff expertise had to be frequently updated to keep abreast of ongoing changes in threats , vulnerabilities , software , security techniques , and security monitoring tools .
They recognized that staff expertise didn 't need to be frequently updated .