Productive AI: tool turns security team into expert guards

Written by: Arthur Capella, managing director of Tenable in Brazil

Imagine you are dealing with thousands of hotspots around the world and anyone can try to access it from anywhere just by accessing the internet. Because this is the daily life of information security professionals, CISOS and others who protect our digital lives.

This is a disproportionate and unfair statement, because while these soldiers should always be 100% right, the attacker only needs to hit their target once.

In my many informal inquiries to security teams, I’ve noticed that the vast majority say the team is often too busy dealing with critical incidents. And this was confirmed by a survey conducted by Forrester at Tenable’s request, which showed: 58% of cybersecurity and IT professionals in Brazil say the team is too busy dealing with emergencies to take preventative measures to reduce the organization’s risk level.

Also, 72% of these professionals think: If companies could invest more preventative cybersecurity resources, they could be more successful in defending against cyberattacks..?

Preventing attacks has become much more important than removing them. The aim is to deter the attack, to make the attack as difficult as possible for a criminal who often chooses the easy way out and usually does not prefer to enter the organization with very well locked doors. followed.

Today, Security professionals benefit from using Generative AI as a true advisor to help them prevent attacks. For example, it is possible to talk to Generative AI to investigate vulnerabilities, understand where the vulnerabilities are, and take action to prevent threats before they mitigate them.

It is necessary to understand what more generative AI can do to contribute to the security of the technological environment, but in general, the advantages of AI depend on the breadth and quality of the data stored to deliver clear and accurate insights.

To leverage productive AI, it’s important to have a comprehensive industry database of assets, risks, privileges and threats, as well as technical knowledge of cybersecurity to fuel AI. Security companies already have billions of exposure events and millions of different security settings derived from continuous evaluation of billions of assets. This risk exposure data warehouse is critical for any security company.

It is possible to talk to Generative AI to investigate vulnerabilities, understand where weaknesses lie, and take action to prevent threats.

Leveraging a rich knowledge base will allow security teams to go from reactive to proactive and all analysts to become expert advocates. High-volume exposed data storage provides meaningful insights that allow security teams and administrators to analyze decision-making and guide their teams faster, stay ahead of attackers and prevent successful attacks.

Artificial intelligence is not new to cybersecurity companies. Since implementing Dynamic Vulnerability Priority Ranking (VPR), security companies have been applying artificial intelligence techniques to help their customers prioritize vulnerabilities based on real business risk.

Today, with increasingly humanized technologies, we see that security companies come together, share information, and make productive research tools supported by artificial intelligence available to the entire cybersecurity community, free of charge.

In short, Productive AI is becoming an increasingly streamlined advisor to use so that security professionals can be more productive and focus more resources on attack prevention. Insights generated from the storage of exposure data make management of the environment more accessible and turn analysts into expert advocates.