Techopedia asked whether security teams should replace managed detection and response with AI. Michael Hasse of Itwerx was one of the consultants they put the question to.
It is not a new idea
The first point made to Techopedia was that swapping MDR for AI is not a novel proposal, and that the framing of the question is wrong:
“The catch is that nobody is ‘replacing’ anything, rather AI is being integrated solely for the purpose of expediting detection and response, which improves the signal-to-noise ratio for human operators drastically and makes for a far more effective SOC.”
Augment, do not replace
Asked directly whether replacing MDR with AI was a good idea, the answer was that security teams should not be replacing MDR services but augmenting them.
The distinction matters commercially as well as technically. “Replace your MDR with AI” is a procurement decision that removes people from the loop. “Improve the signal-to-noise ratio for the people already in the loop” is a tooling decision that makes them better at the job. They are not the same purchase, and they do not carry the same risk.
Read the full article at Techopedia.
Itwerx Corp is a service-disabled veteran-owned small business providing IT services across Seattle, Bellevue, Everett and Snohomish County. This is the kind of thing our cybersecurity work deals with – talk to us about yours.
