A national operator consolidated three separate security monitoring teams covering signalling, fraud and content under AI-SOC. The platform ingested 500K+ daily alerts, correlated them into approximately 150 prioritised incidents and automatically resolved 45% within defined policy guardrails. Security resources were redeployed from routine monitoring to threat hunting.