Page 104 - Cyber Defense eMagazine for September 2020

5 Ways to Avoid Security Automation Pitfalls

By Joe Partlow, CTO at ReliaQuest

Amid an enterprise attack surface that is more complex than ever, many security teams have turned to
automation to boost threat detection and response. When implemented correctly, security automation
can help increase visibility and control over an ever-expanding environment and across the entire security
lifecycle.

One of automation’s major benefits is that it saves time and energy by replacing manual or repetitive,
low-value processes. For example, it can consistently execute operational tasks like process or service
restarts or quickly automate incident response processes.

However, some enterprise leaders have unrealistic expectations for automation. They treat it as a cure-
all that can replace analysts and other team members. But without the right combination of people,
processes and technology to use automation effectively, enterprises could end up investing more
resources than they realize in new efficiencies. There are a few strategies and guidelines security teams
should keep in mind before they make such an investment.

Use Automation to Elevate, Not Replace, Human Experience

While automation can streamline workflows and help execute security tasks at scale, it cannot replace a
security team. In fact, getting the full value of automation relies on having mature processes and teams

Cyber Defense eMagazine – September 2020 Edition 104
Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.