Cybersecurity controls must be constantly evaluated to ensure they can withstand new and upcoming threats, especially those that target employees.