Using Automation to Combat Increasingly Sophisticated Cyberattacks

To counter more sophisticated attacks driven by AI and other advanced capabilities, organizations should take a risk-based approach to automation and automatic responses to attacks.

• Automation should focus on defensive capabilities like security operations centre (SOC) countermeasures and labour-intensive activities.
• Use of defensive AI and machine learning for cybersecurity.
• Technical and organizational responses to ransomware.
• The level of digitization accelerates, and organizations can use automation to handle lower-risk and rote processes, freeing up resources for higher-value activities.