Is the future of the SOC autonomous? A Q&A with Forrester’s Allie Mellen

In a recent webinar, Allie Mellen from Forrester Research and Tines CEO Eoin Hinchy discussed the future of Security Operations Center (SOC) automation, emphasizing the role of generative AI (genAI) in enhancing SOC efficiency. GenAI can handle time-consuming tasks such as report writing and language translation, aiding global coordination, but it requires human validation for critical activities to prevent errors. The conversation highlighted the potential of task-specific, agent-focused AI to automate initial triage and some investigation aspects, aiming for high accuracy and explainability. Forrester advocates for SOCs that eschew traditional L1 to L3 structures, suggesting that analysts handle alerts from start to finish for skill development, ensuring talent retention and mentorship. The discussion also clarified that SOC refers to security operations centers, distinct from compliance frameworks, and stressed the need for improved training, as current user training requirements for tools like Security Copilot are extensive and their return on investment is still uncertain.