To keep policies and procedures aligned with evolving threats technologies and regulatory obligations is the correct choice.

As Harbor Lane moves services to the cloud the threat landscape the supported technologies and the regulatory environment can change. Regular review and revision of security documentation ensures that policies procedures and control mappings remain effective that responsibilities are clear and that the company can demonstrate ongoing compliance with applicable rules.

To improve incident response capabilities and audit readiness is not the best answer. While updated documentation can support response and audits those outcomes are narrower benefits and do not capture the broader need to align policies with evolving threats technologies and regulations.

To reduce reliance on outside security consultants is incorrect. Revising documentation may decrease some dependence over time but organizations still need external expertise for specialized assessments and to address gaps in knowledge when new technologies are adopted.

To lower the number of internal security training sessions is incorrect. Keeping documentation current normally increases the need to train staff on new or changed controls and procedures rather than reducing training frequency.

Full AWS Practitioner Certification Question