SECURITY AUTOMATION IN INFORMATION TECHNOLOGY (2018)

Security automation has been a major issue for many companies in the fight against rising cyber threats enabled by new cloud network attacks and proliferating the Internet of Things. A recent survey by the threat detection and hunting company Fidelis Cybersecurity has revealed this trend among 300 CISOs, CIOs, CTOs, architects, engineers, and analysts studied in a range of industries. More than half of the professionals analyzed (57 percent) said that their companies are concerned with a lack of automation. Cybersecurity automation is one of the developments in information technology. Automating humandriven, and repeatable processes will focus on the more productive problem - solving tasks within organizations and individuals. Focusing on these issues will foster innovation and contribute to a more robust organization from a cyber-security point of view. Automation also adds to the complexity of information systems in an organization and as malicious targets grow, cybersecurity initiatives must be prepared to implement automated cybersecurity solutions. As long as the information is available, the confidentiality, integrity, and availability of the cybersecurity programs must be safeguarded. In most industrial industries, automation is the main force of transition. By 2030, the automation industry is expected to completely replace over 800 million workers and technology transforms our way of working and organizing and communicating with others. The almost constant occurrence of data breaches suggests that it does not stop so that organizations are unable to have long-term reservations regarding security automation concepts and capabilities. Security automation of IT security infrastructure is a priority and keeping information systems safe. Automating policy enforcement, warning control, and prioritization and the preparation of incidences will increase the efficiency of businesses and reduce costs significantly. Through automating the analysis, response, and remediation of threats in its entirety, businesses can replicate the expertise and reasoning of seasoned cyber experts on an international basis, ensuring a greater overall degree of protection and compliance. That is never the case today. For example, most organizations, due to the huge resources needed for performing audits, only audit a representative sample of their processes. For example, it is common practice in an organization to the only audit a few of them or even to audit the basic security configuration they all need to have if 50,000 laptop computers would be similarly configured. Given the audit tools required, these approaches are understandable. Methodologies have been developed over the years to safeguard data but the complexity required to ensure security still hasn't been changed. Analysts need to manually address threats without security automation. This often involves investigating and comparing the issue to the threat of information from the company to identify its validity, agree on a course of action, and then manually solve the problem – all with possibly millions of signals and often incomplete information. Moreover, many of them are repetitive. Analysts also waste valuable time on repeated tasks, which preclude them from identifying more critical problems. Security automation works a great deal for the information technology team. If an alert appears, it determines instantly whether an action based on previous responses to similar incidents-is required, and if so, it can remedy the problem automatically. Meanwhile, security analysts have a longer time in which they can focus on strategic planning, threats, and more thorough research, which adds value to the company. Keywords —Security automation, Information security, management, security, configurations, cybersecurity, automation, information technology, IT security