What part of cybersecurity is still way more manual than it should be in 2026?

I recently had to deal with compliance evidence collection (audits, ISO, SOC 2, etc.) and was surprised with how dated and manual the process still is. Lots of copying between tools, chasing context, and relying on people to stitch things together. Looking for similar spaces where everything is sl