One mobile operator reported that up to 80% of their cybersecurity operations team's time is spent on audits and compliance tasks instead of threat detection or incident response.