Why Federal Agencies Need AIOps
Jim Debardi & Justin Long
June 2, 2019
Federal government Security Operations Center (SOC) and Network Operations Center (NOC) teams are overwhelmed with tools. Dozens, even hundreds are not uncommon, which are designed to monitor and alert on various systems, applications, behaviors and other factors of the IT enterprise environment. This commonly leads to one of two scenarios: 1. being overwhelmed with false positives which desensitize security staff to legitimate alerts such as the famous Target Stores breach, or 2. Not getting alerts to legitimate concerns/breaches. In addition, this also adds a complex learning curve and tedious upkeep of the latest software, sensors, and integration requirements. To address this, AIOps is emerging as a key asset in federal IT teams’ arsenal.