Because some security work is heavily reliant on human judgment, not all controls are subjected to automation. However, manual controls are not appropriate to use with respect to background checks, log reviews, attestations, and access rights reviews.

A. True

B. False

A. True

Explanation:

The statement is true because everything cannot be automated in security work because human judgement has to take decision in case of any security breach and the action must be defined according to the incident and given set of circumstances. Therefore all controls cannot be automated.

Auto controls on the other hand can be implemented on the tasks which involves no decision making, like recording of footage, attestations, access rights etc. These tasks can be done automatically rather than manually.