Data is More Crucial Than Process in Security Automation