Cybersecurity systems work non-stop to thwart network infiltration and data-theft. But they often get it wrong. The average enterprise in the US receives more than 10,000 alerts every day. This daily load of false positives distracts cyber security professionals from dealing with legitimate security alerts. As more and more time is wasted chasing after false positives, security staffs have to resort to triage that is, they try to figure out which alerts are important and require a response, and which ones are false and should be ignored.
Source: https://thehackernews.com/2017/03/secdo-incident-response.html