Controls are not updated in response to new and emerging high priority cyber threats
Context and Guidance: The cybersecurity threat landscape is dynamic in nature - and new cybersecurity threats are frequently emerging.
New cybersecurity threats that have the potential to impact the function should trigger a review of control effectiveness. Controls that are no longer effective considering the new cybersecurity threat should be updated.