Hiring more people to do triage.
Investing in products that offer post-alert triage, but create a scenario where the policy doesn’t match the response, so baseline policies are not a true indicator of intent.
Ignoring the growing number of alerts while trying to find the needles in the haystack that create the highest risk.