This talk will cover the fundamentals of security orchestration, automation, and response (SOAR), how it can help your organization and people, how to approach your initiative, what you should/shouldn’t automate, and how to measure SOAR success.

Security orchestration, automation, and response (a.k.a. SOAR) is the cool kid on the block in security right now. Implementing SOAR requires a strategic and a tactical approach in order to avoid pitfalls and ensure ongoing success. Considering why, when, and how your organization should embark on a SOAR initiative requires careful planning. Choosing the right tools and technologies, selecting the right processes, and implementing the right measurements are key to the success of many initiatives, but they are absolutely vital in the case of SOAR. The operational benefits of SOAR are many-fold, such as improving efficiency and accuracy, reducing risk, and deriving more value from your current security stack. But it does also beg the question:What does this really mean for our teams? This talk will cover the the fundamentals of SOAR, how SOAR can help your organization and your people, how to approach your SOAR initiative, what you should and shouldn’t automate, and how to measure SOAR success.