EDITOR ’ S QUESTION

ALEXEY LUKATSKY , MANAGING

DIRECTOR , CYBERSECURITY BUSINESS CONSULTANT , POSITIVE TECHNOLOGIES

70 %+ cybersecurity professionals need to enhance skills in governance , including training programmes for SOC and leadership .

Artificial Intelligence has significantly improved cybersecurity efficiency by providing additional layers of data analysis , but human experts are still essential for creating core aspects of queries .

As cybercrime evolves , it is crucial for management to engage with their Chief Information Security Officer , CISO regularly to discuss proactive strategies to combat hackers and ensure system security . However , these discussions are not as frequent as they should be . The latest innovations in cybersecurity are making significant progress in reducing complexity and integrating automation and intelligence . other to identify complex attacks using heuristic and statistical methods , as well as machine learning .

One notable innovation is the MaxPatrol O2 metaproduct , which has transformed the operation of Security Operations Centres by reducing the need for human intervention . It automates threat detection and prevents hacking , protecting infrastructure with fewer personnel . This demonstrates how modern technology can defend against cyber threats while reducing the extensive training required for cybersecurity experts .

With MaxPatrol O2 , the average response time to detect incidents is reduced from 3 hours to 1 minute , the average time to create a response scenario is reduced from 1 hour to 10 seconds , and the total number of man-hours required for detection and response is reduced from 48 hours per day to 1 hour per day .

At the same time , the overall efficiency of analysts in the IS threat monitoring and response centre increases from 30 to 50 times according to Positive Technologies statistics .

To reduce the time it takes to find solutions or to explain collected information , generated reports , can be done by using large language models and integrating cybersecurity tools into existing solutions like ChatGPT , Gemini or Claude , or developing and training proprietary machine learning models .

These advancements greatly benefit CISOs and security administrators by optimising their tasks and allowing them to focus on more complex issues .

Automation in IS , is to reduce the involvement of IS specialists in the threat detection process and , ideally , to exclude humans from the process of deciding on the question is there a threat or not . For this purpose , various engines are used that complement each

36 INTELLIGENTCIO MIDDLE EAST www . intelligentcio . com