1. A method comprising the steps of: identifying one or more resources to be removed from a resource pool associated with information technology infrastructure subject to a persistent security threat; replacing the one or more identified resources with one or more corresponding refreshed resources to provide a refreshed resource pool; and remapping elements of a set of workloads running on the information technology infrastructure to elements of the refreshed resource pool, wherein the information technology infrastructure is configured with a mapping of workload elements to resource pool elements and remapping the workload elements comprises altering said mapping in accordance with a refresh-and-rotation interval that limits an amount of time that a particular workload element is mapped to a particular resource pool element in order to deter the persistent security threat; wherein the identifying, replacing and remapping steps are performed by a processing device comprising a processor coupled to a memory.