AUSCERT PLENARY PANEL by Stuart Corner
What does a security transformation strategy look like and how can SOAR help AUSCERT2021 SOARS ON THE GOLD COAST
program kicked off with a panel session: What does
SOAR (security orchestration automation and
can SOAR help, comprising: Jess Dodson, customer
a security transformation strategy look like and how
response) refers to technologies that enable organisations to collect inputs normally monitored by the security operations team and then leverage a combination of human and machine power to help define, prioritise and drive standardised incident response activities. According to Gartner, SOAR tools allow an organisation to define incident analysis and response procedures in a digital workflow format.
engineer at Microsoft; Casey Ellis, founder and CTO of Bugcrowd; Tony Kitzelmann, CIO of AirServices Australia; and James Young, global security specialist at Splunk.
AUTOMATION NOT A JOB KILLER Dodson was quick to dispel any notion that automation enabled by SOAR might replace cybersecurity specialists. “You want to be doing cool stuff and focusing on things that are actually
Gartner says SOAR tools are steadily gaining traction
important rather than boring day-to-day work, … doing
in real-world use to improve security operations,
proactive work rather than purely reactive.”
and: “Security and risk management leaders should evaluate how these solutions can support and optimise their broader security operations capabilities.”
Kitzelmann took this further, suggesting that, without technologies to automate the routine tasks of cybersecurity, skilled people were likely to leave the industry.
So, SOAR was a timely theme for this year’s AusCERT annual conference, Aust2021 its 20th, held at the Star Hotel on the Gold Coast and online.. “Security Orchestration, Automation, and Response will see us SOARing with cyber … as we focus on improving efficiencies and making security a more self-operating function within our organisations,” AusCert said. In line with the theme the conference
96
WOMEN IN SECURITY MAGAZINE
“So doing something and getting started is going to put you in a better position straightaway rather than just going ‘it’s too hard. I can’t deal with it. I can’t get it perfect straightaway. So I’m not going to bother’.”
