It is unlikely
that a group of individuals would be able to manually review
these alerts and form meaningful associations and conclusions
from this volume of data. Auditors could collaborate with IT
to determine predefined thresholds to flag certain types of
events and could even formulate countermeasures and actions