Regular review and updating of access control lists are considered a part of day-to-day security operations.
Reviewing and updating access control lists are not a part of daily security operations.
Reviewing and updating access control lists are indeed a part of daily security operations.