"AI Assistance Cuts Alert Triage Times in Half"

Artificial Intelligence (AI) has been a hot topic of conversation, partly due to the AI-driven chatbot ChatGPT. However, AI has been used in mainstream business applications for decades. AI can be used in cybersecurity for data augmentation and attack simulation. In addition, it can help detect anomalies in network traffic or user behavior to improve threat detection and response. According to a recent report, AI has made significant progress in threat alert triage efforts. With AI assistance, alert triage times can be reduced by more than 50 percent, which means a great deal to cyber professionals who spend nearly one-third of their time following incidents that are not genuine threats. AI-enhanced solutions may even help retain cybersecurity talent. It has been proven that AI-powered capabilities improve the speed and accuracy of Security Operation Center (SOC) operations. For example, IBM Managed Security Services automated over 70 percent of alert closures and reduced its average alert triage times by 55 percent within the first year of implementing AI. AI-powered alert triage prioritizes or closes alerts automatically based on AI-driven risk analysis. This form of triage involves AI models trained on previous analyst response patterns, external threat intelligence, and broader contextual insights from multiple detection tools. This article continues to discuss how AI has benefited cybersecurity operations. 

Security Intelligence reports "AI Assistance Cuts Alert Triage Times in Half"