Can Your SOC Keep Pace?

Are we measuring how much work our SOC completes, or how much of our threat exposure it actually covers? How are we transforming the next generation of security operations?

It is said that UK SOCs fully investigate and validate just 52% of alerts on average. But the challenge goes beyond alerts left in the queue. What about the threat hunts that never happen, intelligence advisories that go unactioned, or emerging threats that remain unexplored because teams simply don’t have the capacity?

As attackers increasingly operate at speed and scale, security teams face a growing imbalance between the threats they need to investigate and the human resources available to do so. Better detection alone may not close this gap. When the capacity of human analysts determines the extent of security coverage, how can defenders keep pace?

AI agents are opening up possibilities for a different SOC operating model — one where technology takes on more of the groundwork across investigation, threat hunting and threat intelligence, while analysts focus on the findings, decisions and judgement that require human expertise.

But does greater automation necessarily mean better security coverage? How do we demonstrate its effectiveness, establish trust and maintain appropriate human oversight?

Join fellow CISOs and security leaders for an open, practitioner-led discussion to challenge assumptions, compare approaches and explore what changes when security operations move beyond alert queues towards a model combining human strategy with machine scale.

What does this all mean in practice for CISOs? Where should autonomy begin and end? How do we measure success when coverage, rather than alert throughput, becomes the priority?

Join fellow CISOs and security operations leaders for a memorable private dining experience while you discuss what it takes to evolve the SOC operating model, make better use of analyst expertise and close the gap between threats detected and threats investigated.

This is an opportunity to step away from day-to-day operational pressures and benchmark approaches with CISO peers facing similar challenges. Share what is working, challenge assumptions and explore the practical opportunities and limitations of AI agents in security operations.