A best practice for managing risk in an IT infrastructure is by using automation. Processes should be automated as much as possible to reduce human errors.

Continuous monitoring is also a best practice. With continuous monitoring, controls are implemented and then checked and audited to ensure the controls are still in place.

For example, after system patches are deployed, compliance audits are conducted regularly to verify that all systems are patched.

Access controls, which lock down systems and data, are verified regularly to ensure they have not been modified. Continuous monitoring methods can be both automated and manual.

Do you believe there is a downside to automated continuous monitoring? Why or why not? with references and citations

Fully address the question in this discussion; provide valid rationale for your choices, where applicable; and respond to at least two other students$$ views