Updating security procedures and scheduling security audits