March 2025 Summaries

The Future of Security Operations podcast has returned for its sixth season, with Christofer Hoff, Chief Secure Technology Officer at LastPass, as a guest. Christofer has over 30 years of experience in network and information security architecture, development, engineering, operations, and management. He discusses various topics, including his career trajectory, merging the CTO and CSO roles at LastPass, rebuilding the company's 60-person security org from scratch, navigating tech debt and major incidents during an org-wide restructure, communicating with customers and the broader community during incidents, and leveraging automation to drive efficiency. Christofer shares insights on the biggest AI-driven challenges facing his team, including passkeys, passwords, and the future of secure authentication. He emphasizes the importance of a more holistic approach to security through collaboration, building a new security team during major cyber incidents, customer communication around incidents, and ensuring a thoughtful approach to AI. Christofer also discusses how LastPass uses automation to drive efficiency, leveraging tools like Tines to democratize the ability to quickly stitch together disparate systems.

In today's data-driven world, companies face significant risks from various threats that can lead to devastating data loss, impacting revenue, operations, reputation, and legal compliance. The financial fallout from data loss can extend far beyond the immediate costs of data recovery and system restoration, including revenue loss from downtime, high cost of recovery efforts, reputational damage, regulatory penalties, and potential long-term financial consequences. To mitigate these risks, IT teams must plan for worst-case scenarios, invest in disaster recovery strategies, and leverage automation and orchestration platforms to streamline processes, minimize business impact, and ensure compliance with data protection regulations. By implementing robust backup and disaster recovery plans, organizations can safeguard their information, minimize downtime, and maintain business continuity, ultimately protecting their reputation and complying with regulatory requirements.

Tines Pages has evolved from a simple form tool into a sophisticated page editor that enhances collaboration and communication within organizations by allowing teams to build interactive and dynamic applications. These pages provide comprehensive context, reducing interruptions for IT and security professionals by equipping end-users with necessary information in one place, thus streamlining tasks such as granting access to files or verifying IP addresses. The platform supports the creation of resource hubs accessible at various levels, enabling self-service and transparency while maintaining security. Notably, Tines Pages allow customization to meet individual user needs, exemplified by Layer 3 Communications' use of pre-populated pages to expedite incident response processes. The ultimate aim is to foster efficiency and clarity by anticipating user needs and guiding them through seamless interactions, as demonstrated by the integration of conditional elements and personalized features.

Tines Workflow Automation is now available directly through Elastic, allowing teams to combine its orchestration and automation capabilities with Elastic Security and Observability. This integration enables organizations to strengthen defenses, ensure operational resilience, and maximize the return on their existing investments by providing real-time insights that cut through noise and automation. With Tines' intuitive workflow orchestration and automation, teams can build, run, and monitor workflows, enrich data, add context, and meet users where they are, resulting in greater value and fewer silos from disparate data and alerting systems. The new package makes it easier for teams to effectively orchestrate and automate security and observability workflows, resolving issues faster, raising operational efficiency, reducing costs, and executing consistently.

Yannick Gloster, a software engineer at Tines, enjoys his work on new AI features and quality-of-life updates, which gives him creative freedom. He grew up sailing, picked up rock climbing during college, and recently got into Formula 1, finding it engaging with technical engineering involved. At Tines, Yannick works on multiple projects simultaneously, prioritizing customer feedback and suggestions, and collaborates frequently between teams. His favorite project is the Kanban board view for Cases, which he pitched to his team and later built with colleagues. For newcomers at Tines, Yannick advises sharing ideas with the team, building stuff, and engaging with customer feedback. He loves the Tines library, a collection of pre-built workflows, which provides endless possibilities but also requires creativity to get the most out of it. Yannick praises the company culture, emphasizing the communal vibe, soundness value, and support from colleagues, making it an ideal place for growth and exploration as someone starting their career.

Integrated security workflow automation tools can save security teams days or even weeks of work by streamlining processes and operations, enabling quicker response times, and reducing the rate of human error. These tools are essential for maximizing value through effective implementation, especially in today's high-vulnerability disclosure landscape where 26,447 vulnerabilities were disclosed in 2023 alone. Security workflow automation best practices include creating efficiencies by reducing manual, repetitive tasks, leveraging no-code solutions that can be used by anyone without coding knowledge, and prioritizing well-established processes for automation. Continuously testing and optimizing workflows is also crucial to ensure efficiency and optimize performance. Ultimately, security workflow automation requires a well-defined strategy and scope that meets the needs of the business and key stakeholders.

In 2025, security teams are navigating complex challenges, including emerging threats and secure AI adoption amidst a changing regulatory environment, as reported in an IDC white paper sponsored by Tines and AWS. Despite increasing workloads and complications from large tool stacks, security professionals find motivation in the creativity, variety, and continuous learning their roles offer. The study reveals that while security leaders are successfully advancing ambitious initiatives and integrating automation, there are notable areas needing improvement, such as work-life balance. Key statistics include a 72% rise in workloads, 35% of leaders citing tools lack essential functionality, and 95% supporting cross-departmental automation. Additionally, AI is utilized by 36% for summarization and 32% for risk assessment. A related webinar hosted by industry experts aims to delve deeper into these findings and explore practical strategies for enhancing efficiency and resilience in security teams.

Ashley Buck, the Regional Lead for Sales Development at Tines' Boston office, plays a crucial role in driving both revenue and talent growth within the company. Her daily responsibilities include evaluating team messaging, coaching, and career development, with a strong focus on fostering personal growth among her team members. Ashley values the unique opportunities at Tines that allow her to explore new roles and projects, such as enhancing the approach to outbound sales which led to better team motivation and accountability. She emphasizes the importance of curiosity and internal motivation for anyone starting at Tines, advocating for continuous personal and professional development. Additionally, she appreciates the versatility of the Tines platform, which can be applied to both professional and personal projects, and credits the company's strong culture as a key reason for her dedication to the role. Tines is actively hiring, with roles available in the US and Ireland, attracting interest from both customers and potential employees due to its innovative product and supportive work environment.

Confusion surrounds the definition of "AI agent," but it generally involves AI-driven systems with autonomy, tool usage, understanding, and reasoning capabilities. At Tines, a more precise definition was sought, leading to the creation of a litmus test based on the concept of identity, inspired by common law principles of agency. This test determines if an AI system acts under its own identity, which implies autonomy and decision-making capability, distinguishing agents from AI assistants or copilots, which act under human supervision. In enterprise systems, identity is reflected in audit logs, which reveal whether an AI system is truly an agent or merely an assistant. While many AI tools do not qualify as agents, they still play an essential role in enhancing human work, and the potential of true AI agents remains an exciting prospect.

Colm O’Grada, Director of Data and Analytics at Tines, enjoys the dynamic nature of his role, which involves working across various teams to enhance decision-making processes through data. Living in a small town outside Dublin, he balances his work life with family time, photography, fitness, and Brazilian jiu-jitsu. Colm finds fulfillment in helping his team develop a diverse skill set and appreciates the creative freedom and growth opportunities within Tines' fast-paced environment. A significant project he worked on was refining the company's pricing and packaging, which involved extensive communication and analysis over nine months. He advises new employees to engage with as many colleagues as possible to maximize learning opportunities and praises the Tines platform for its efficiency and robust support community.