CompTIA Security+ SY0-701 Practice Question

Regularly reviewing and updating policies and controls is the correct answer because it allows an organization to address new threats and changes in the operational environment. It ensures that the policies and controls continue to be relevant and effective. While employee training, installing antivirus software, and limiting user privileges are important security practices, they do not directly ensure that policies and controls are kept up-to-date with the current threat landscape.