Which action best supports updating security documentation in response to new threats?

• A. Deleting old records to avoid clutter
• B. Ignoring minor incidents
• C. Refreshing training and updating controls
• D. Reducing audit frequency

Answer: (C)

When threats evolve, the way you respond must be updated in both people and procedures. Refreshing training ensures everyone knows the new steps, roles, and incident response actions, while updating controls aligns the documented measures with what is actually in place to mitigate the new risks. This combination keeps your security program current, supports effective implementation, and improves auditability and compliance. Deleting old records undermines traceability, ignoring incidents misses opportunities to improve, and reducing audits lowers oversight—none of which properly updates the documentation in response to new threats.