In order to keep pace with the evolving threat landscape and changes in IT, security control validation should be performed regularly. At a minimum, validation should be performed weekly as well as in response to new emerging threats and configuration changes to prevention and detection security controls.