Michael Gregg
Field CIO - Strategist,
Palo Alto Networks
The Modern SOC: Leveraging AI & ML
Tuesday, October 28, 2025 | 4:30PM–5:15PM CT | EDUCAUSE Commons, Cybersecurity & Privacy Central, Poster Area
Session Type:
Poster Session
Delivery Format:
Poster
The needs of the security operations center (SOC) have changed. Without automation and AI, it’s taking organizations too long to detect security incidents, and when they detect them, too long to remediate. In addition, the ever-growing data volumes handled by SOCs pose a challenge. Traditional SIEM solutions demand substantial engineering efforts, have a slow time-to-value, and predominantly rely on manual intervention by SOC analysts with a reactive security approach. This leads to increased open alerts, longer resolution times, and increased SOC analyst fatigue.
Join our panel session to learn about an AI-driven security operations platform, which harnesses the power of artificial intelligence (AI) and automation, can simplify security operations, stop threats at scale, and accelerate incident remediation.
Hear from our internal experts and customers about how a modern SOC collects, normalizes, and intelligently stitches together data, enabling native machine learning and automation, which has yielded:
• Over 99% decrease in open alerts
• Over 10X improvement in incident closure rate
• Over 60% automatic incident resolution
• Reduces MTTR from hours/days to minutes
Ultimately, a modern SOC frees up the SOC employees and provides users the metrics and measurements to demonstrate effectiveness and efficiency.
