Muhammad Ali Paracha

Head of Cyber Defence

Transurban Ltd

A 20-year cybersecurity veteran has built from scratch and now leads a global Cyber Defense function for an Australian ASX 20 organization across Australia, North America, and Canada to protect IT, OT, and cloud environments.

Speaker sessions

Transforming the Future of Cyber Defence with Agentic AI

As cyber threats move quickly and the volume and sophistication of attacks consistently increases to keep pace we need to ensure we don’t let cyber incidents through that aren’t treated inline with our SLA’s and cyber response playbooks.Challenge: Security Operations Centres are dealing with ever-increasing volume of events and alerts. Measuring the quality and accuracy of the security investigations is always a challenge as SOC Analyst follow their skills and knowledge which they build over time instead of defined playbooks to investigated less sophisticated alerts. We used a monthly and manual review process to examine 8% of cyber tickets per month and provide feedback to the responsible cyber defence analyst on if and how they were categorising tickets and whether they were following each of the cyber response playbook steps in the right order and for the right outcome, but this approach was not scalable.Solution: We build an Agentic AI solution which can perform the quality checks, improve accuracy in real time across all security investigations without augmenting any humans. The AI models are trained on our real-time security investigations which helped to maintain false positive less than 3% while providing 100% coverage across all incidents. It does not replace the cyber analyst as the AI solution only knows the data it has been trained on, it doesn’t therefore infer or can ascertain when things change outside of the training data✅ 60% reduction in alert triage time✅ 10x faster security incidents quality assurance✅ Happy analysts, less burned-out teams