When an MSSP/MDR detects something, you must coordinate with IT, legal, and business units. Accountability gaps remain, vendors detect and notify, but customers still bear breach consequences.