To ensure the IT security policy is up to date against possible cyber attacks, it is regularly reviewed by the policy advisory and update service. Review may also be undertaken on demand.