INTERVIEW WITH ...
to combat every new defence ,” says Cornell . “ As such , many organisations find it difficult to meet the constantly shifting security demands of a digitalised world . But , there ’ s a simple solution that organisations can take advantage of to ensure robust security of their systems and processes despite the lack of access to cybersecurity talent : automation .
“ There is still unease surrounding automation from those who believe implementing it will either create more work or remove people from the equation entirely . But , the reality is that low-code security automation can strategically up-level the existing security team by removing the mundane and repetitive tasks taking up the bulk of their time . By embracing this technology as a tool to support the security operations centre ( SOC ) instead of replacing it , organisations can detect , identify and respond to threats faster while reducing human error and costs .”
With this in mind , Cornell outlines three ways in which automation can help businesses address some of the key cybersecurity challenges they face as a result of the security talent shortage .
1 . Mitigating alert fatigue “ With a limited number of staff responsible for monitoring upwards of 10,000 alerts a day with zero room for error , the potential for breach is high ,” describes Cornell . “ That ’ s why one of the biggest problems facing security and IT teams is alert fatigue ; a phenomenon that occurs when cybersecurity professionals are inundated with such a high volume of security alerts that it leads to a diminished ability to react effectively to and investigate real threats .
“ With 2.7 million unfilled cyber jobs globally , and one third of organisations surveyed by Swimlane believing they will never have a fully-staffed security team , it ’ s clear that this issue can never be solved by hiring . This has led to burnout among security analysts all while cyber attacks continue to increase in frequency and sophistication .
“ Automating the processes monitoring security alerts by creating and deploying pre-programmed responses to specific incidents helps organisations reduce the pressure on their cybersecurity teams .
16 September 2023