Where automation is not practical, which monitoring methods are used?

1. Not every part of monitoring can be automated. 2. The remainder still has to be covered somehow. 3. Manual, procedural monitoring methodologies are implemented where automation is not practical. 4. So the answer is manual methods. _Source: NIST SP 800-137, 'Information Security Continuous Monitoring for Federal Information Systems and Organizations'_