Hi All
An important perspective, that we cannot permit or allow AI and automation to take the wheel of cyber defense. It is important that we use it as a tool, and ensure that human involvement is used at all steps and not (not) to simply automate without brains or that it is cheaper than human beings. It enhances our capabilities.
https://www.securityweek.com/why-we-cant-let-ai-take-the-wheel-of-cyber-defense/
First, make “human-in-the-loop” the default setting for any AI that can act on your systems or data. Automated containment can save your skin in the first few seconds of an attack, but every autonomous process needs guardrails. It needs to be auditable, and there must be an explicit hand-off to human operators the moment confidence levels drop, or the stakes get too high.
Second, get serious about where your data comes from. Map out exactly where your models are getting their input. Validate those sources. Watch for drift. Document why decisions were made. If you cannot trace how an AI arrived at a specific conclusion, you should not let it make changes to your production environment without someone watching.
Third, treat AI-enabled cyber exercises as a priority for the board, not just the IT department. Run simulations where the tools are wrong, slow, or compromised. Stress-test your escalation paths. Coach your teams to question the AI’s output and how to recover when the “smart” system acts stupidly.
Take a sanity check
Regards
Caute_Cautim
