Research finds that security leaders are dissatisfied with the use of automation in their company's security operation centers (SOCs). The research illustrates how adopting cybersecurity automation drives positive business outcomes, including solving staffing shortages and mitigating cyberattacks.

According to the survey, nearly all IT security leaders (96%) admit to someone at their organization using AI tools not provided by their company — including 80% who cop to using such tools themselves. Most security professionals (97%) believe their organizations are able to identify their use of unauthorized AI tools, and more than 3 in 4 (78%) suspect their organization would put a stop to it if discovered.

Ninety-six percent of surveyed security professionals are not fully satisfied with their organization’s use of automation in the SOC. Reasons for dissatisfaction with SOC automation varied from technological concerns such as the limited scalability and flexibility of the available solutions (42%) to financial ones such as the high costs associated with implementation and maintenance (39%). But for many, concerns go back to people: 34% cite a lack of internal expertise and resources to manage the solution as a reason they are not satisfied.

Eighty percent of surveyed security professionals predict an increase in cybersecurity automation investments in the coming year, including 55% who predict an increase of more than 5%. One hundred percent of surveyed security professionals reported positive business impacts as a result of using automation in cybersecurity, citing increased efficiency (70%) and financial gains (65%) as primary benefits.

Incident analysis (54%), landscape analysis of applications and data sources (54%) and threat detection and response (53%) were the most common ways respondents said automation could make up for staffing shortages.

To view the survey findings, download here.