The cybersecurity industry has talked about security automation for years. We’ve grappled with what, when and how to automate. We’ve debated the human vs machine topic. And when we’ve been burned by machines quarantining a system or blocking a port on a firewall in error, we’ve wondered if there’s any place at all for automation.
But deep down we know that automation is the future, and the future is here. Plus, given the cybersecurity talent shortage, we simply must automate certain time-intensive, manual tasks if we want to retain and make better use of the security professionals we have.
Security Orchestration, Automation and Response (SOAR) platforms and Extended Detection and Response (XDR) architectures have emerged to tackle the automation challenge. But the truth is, in cybersecurity we tend to focus on technology to solve all our challenges and sometimes lose sight of the importance of people. Turning automation over to machines works if you’re in a static environment doing the same thing over and over again. But for detection and response, which is dynamic and variable, that’s not the case. ...read more!
