{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"Ep. 271 Modernizing your SOC","description":"When it comes to cybersecurity, a Secure Operations Center (SOC) is the central nerve center for federal agencies. Because of its critical nature, updates must be handled with extreme care. Today, a panel of experts discussed how federal agencies can modernize SOCs to improve threat detection, response, and mission resilience. Thomas Schankweiler from CMS argues that we should start by focusing on adversaries and identifying detection gaps. From there, teams can prioritize improvements to address these specific issues. Part of this identification is understanding the tools' capabilities, especially where they overlap. Systems working independently can inadvertently cause vulnerabilities. Palo Alto\u2019s Rob Sherry highlights the need to put threats in context. One solution is a platform that correlates systems and helps analysts assess risk. NGA\u2019s Michael Ryan agrees with the other experts on the value of context in today\u2019s cloud, data, and user environments. He expands on that by applying it to a Zero Trust environment. One theme repeats throughout the discussion. AI should handle grunt work, allowing humans to focus on key tasks like analysis and strategy. There is no value in finding the wrong needle in the wrong haystack, even if AI can do it in three seconds. ","author_name":"Feds At The Edge by FedInsider","author_url":"http:\/\/fedinsider.libsyn.com\/website","html":"