Mechanisms exist to automatically update anti-phishing and spam protection technologies when new releases are available in accordance with configuration and change management practices.
Does the organization automatically update anti-phishing and spam protection technologies when new releases are available in accordance with configuration and change management practices?