What factors do you consider when maintaining security policies and documentation updates?

Experience