The answer is "yes, your security program absolutely needs maintenance." Every organization should have an information security program, which most people recognize. However, what most don't realize is that their program needs proper upkeep or maintenance. There should never be a point where an organization is overconfident after implementing a security program because there is always room…