How much control should AI get? A CISO roundtable takes on SOC autonomy

Billy Odell Tucker-Robinson Founder & Host — Banking With Billy Network • Intelligence Network • Data Science • AI Research • World News
Published: 2026-09-09T15:57:07.550Z • Permanent link

CISOs from leading financial institutions gathered at a recent roundtable discussion to debate the role of artificial intelligence in security operations centers (SOCs). The conversation centered around the autonomy of SOC teams and the potential risks associated with relying too heavily on AI-powered tools. Notably, the discussion was led by CISOs from prominent institutions such as Goldman Sachs, Morgan Stanley, and JPMorgan Chase. These experts pointed to the current state of SOC alerts, citing the sheer volume of false positives and the resulting operational burdens on human analysts.

Industry insiders agree that the issue is more pressing than ever, with some estimates suggesting that the average SOC receives over 100,000 alerts per day. To tackle this challenge, many organizations are turning to AI-powered tools designed to help filter out false positives and prioritize high-priority threats. For example, companies like IBM and Splunk are developing AI-driven solutions that can analyze vast amounts of network traffic and identify potential security threats in real-time.

The debate over AI's role in SOC autonomy is also being shaped by regulatory considerations. In the United States, for instance, the Cybersecurity and Infrastructure Security Agency (CISA) has issued guidelines for SOC teams to ensure they are using AI-powered tools effectively. Similarly, in the European Union, the General Data Protection Regulation (GDPR) requires organizations to demonstrate transparency and accountability in their use of AI-powered tools.

The increasing reliance on AI-powered tools in SOC teams has significant implications for companies operating in the financial sector. For instance, firms like Goldman Sachs and Morgan Stanley are investing heavily in AI-driven solutions to improve their SOC's effectiveness and reduce operational costs. Similarly, research communities are exploring new approaches to AI-powered threat detection, with some promising breakthroughs in the development of more accurate and efficient tools.

The impact of AI-powered SOC tools is also being felt in the wider research community. For example, a recent study published in the Journal of Cybersecurity found that AI-powered tools can significantly improve the accuracy of threat detection, but also introduce new risks and challenges for human analysts. As a result, researchers are working to develop more nuanced understandings of AI's role in SOC autonomy and its implications for the broader field of cybersecurity.

The debate over AI's role in SOC autonomy is part of a larger pattern of competing approaches to cybersecurity. On the one hand, there are those who advocate for a more human-centric approach, emphasizing the importance of human analysts and their role in detecting and responding to threats. On the other hand, there are those who argue that AI-powered tools are the key to unlocking more effective and efficient SOC operations. Historically, this debate has played out in the context of the "human vs. machine" debate, with proponents of each approach drawing on a range of evidence and arguments.