Decision Automation in Security Operations Brings Transparency and Trust to AI

Yet, for the first line of defense in an enterprise environment, the analysts working in the security operations center (SOC), the notion of automation is more headline than reality. Many basic tasks – logging, fault isolation, reporting, and incident troubleshooting – are still very much manual. Often monitoring up to tens of thousands of alerts an hour, it is a tough problem that presents a constant battle of humans versus events and that's why the right automation is so important. Unfortunately, the automation tools available today only scratch the surface of addressing the biggest challenges that security teams face. Decision automation is a different class of security automation. It emulates human reasoning and decision-making skills, within the context of the environment, to reduce the high volume of noise, which usually produces many false positives.