Panel | Cyber Fusion Center: The Command Center For Integrated Cyber Defense
summary
Panel argues for concrete fusion: running a central “mother” SOC plus specialized identity sock and infra/information socks, integrating SIM, UBA, DLP and OT telemetry; normalizing proprietary logs remains the bottleneck for correlation and playbook portability; teams push a suggestive action-driven SOC that surfaces analyst-proven steps and automates quarantines, proxy/URL blocks and enrichments; AI uses 20 years of logs for pre-incident detection and playbook improvement; regulators demand six‑hour incident reporting, so leadership-aligned data pipelines and automation are essential.
AI-written summary · about
chapters (15)
- 0:00Introduction and panel welcome
- 1:06Defining Cyber Fusion Center
- 5:02Core problems in cyber defense
- 7:09Human collaboration challenges
- 10:43Data sharing and technology silos
- 13:55Managing diverse security technologies
- 17:45Data challenges for executives
- 20:34Interoperability and data normalization
- 24:05Playbooks and automation gaps
- 26:34Role of AI in cyber operations
- 29:42Collective defense and collaboration
- 35:00Key principles of Cyber Fusion
- 36:25Q&A: Cyber fraud use cases
- 38:56Q&A: AI risks and regulations
- 41:04Closing remarks and summary
related talks
40m"S"ecurity Convergence of Cyber, Fraud, and Physical Specialties
19mNavigating the Cyber Frontier
43mCyber Threat Intelligence (Experts recommendations to enhance your security posture)
40mOperational Collaboration: Enhancing Cyber Readiness
03mInterview
32mThe SOC Of The Future… The Future Is Now
23mCyber Security: In search of the Holy Grail?
26mIC5 – Integrated CERT Cyber Communications, Collaboration & Coordination Framework