Automated operations now run from detection through remediation, with fewer people on staff able to interpret what the systems are doing. Accountability has moved from the operator answering the alert to the team that wrote the policy behind it.