kind of embarrassed how much I assumed the tooling would just handle compliance for us

Went in thinking I could point the tooling at our compliance program and mostly walk away. Evidence, policies, audit prep, all of it. That lasted about a week. The automation is great at the repetitive collection and monitoring but the second anything needed real judgment, is this control adequate, does this policy match reality, it either guessed or gave me something confident and wrong. Landed on a setup where the tooling does the grunt work and a person owns the decisions. Less hands off than I wanted, works though. Anyone else go in expecting way more autonomy than the tech actually gives.