Security teams already produce too many alerts on a daily basis. Defences are deployed, dashboards look healthy, compliance checks are complete, yet nobody is fully certain whether controls will hold ...