“responsibilities and then use annual refresher training to cover the same material and update users on new threats and controls. The team responsible for providing security training should review materials on a regular basis to ensure that the content remains relevant. Changes in the security landscape and the organization's business may require updating the material to remain fresh and relevant.”