Security News > 2021 > May > Security Automation: Data is More Important Than Process
Automation can't be just about running the process, but must include three important stages.
New product categories have emerged to tackle the automation challenge, including Security Orchestration, Automation and Response platforms and tools and Extended Detection and Response solutions.
The truth is, the security industry's approach to automation has overlooked the vastly different needs of detection and response use cases because the focus has been on defining a process and automating the steps needed to complete that process.
What is learned from performing an action is far more important than the action itself, so you need to look at inputs and outputs to the process.
Finally, for detection and response, the output and feedback when performing an action is far more important than the action itself.
With the security talent crunch and the need to conduct advanced security operations like detection and response, automation is a key strategy.