Connect with us

Business & Technology

Lessons from deploying AI in a live SOC

Published

on


When SOC teams need to cut through the noise, AI can be crucial. However, it’s true value can only be felt if it’s implemented with operational context and discipline. Through the real experience of running a live SOC, we’ve learned lessons on putting AI into production, rather than just discussing it.

The challenge facing today’s SOC isn’t hard to describe. Too many alerts, too many tools, too little time. To make matters more complicated, there aren’t enough people to keep pace with attackers who are becoming quieter, more patient, and increasingly automated.

Most security leaders already know this. The noise problem is well understood, and the skills shortage is well documented. The pressure being put on analysts is visible every day.

What’s less often shared, however, is what happens when you try to fix it. Talking about AI in SOC is easy. Implementing it inside a live, multi-customer SOC, where mistakes have consequences, is something different.

AI as a change to how the SOC operates

AI shouldn’t be approached as a feature to be added. As a managed security service provider, Gamma Communications runs a live SOC that supports multiple customer environments. Each one comes with different tools, playbooks, and governance requirements.

When we first started integrating AI into our investigative workflows, the goal was to make the SOC sustainable at scale, without endangering trust. We never set out to replace analysts or chase the next big innovation headline.

That distinction matters. Simply adding AI on top of existing processes doesn’t solve the problem. In many cases, it makes it worse.

Automation alone follows rules. It doesn’t reason, adapt or explain itself when something goes wrong. In an environment that depends on judgement and accountability, that limitation shows up very quickly.

AI only creates value when it understands the process

One lesson we learned early on was that single agent AI approaches struggle in real investigations. They can look impressive in isolation, but incidents are messy.

A single phishing case can involve headers, domains, attachments, QR codes, URLs, enrichment from threat intelligence. Not to mention the structured decision making around severity and response.

Human analysts navigate that complexity instinctively, because they have context and experience. AI, on the other hand, needs structure.

That’s why we moved towards a multi-agent approach. Different agents handle distinct parts of the investigation, and deterministic automation handles tasks that must be executed with certainty.

AI reasoning is applied where it genuinely adds value, interpreting patterns, prioritising signals, and supporting decision making. Control over judgement, escalation, and accountability is retained by humans.

An AI-powered, human-led future for SOC

Trust was the hardest thing to earn, both internally and operationally. In a live SOC, you cannot afford confident but incorrect outputs. Hallucinations must be avoided, and you shouldn’t be left with decisions that can’t be audited or explained.

Guardrails were foundational, not optional.

We constrained what the AI could see, how it could reason, and what it was allowed to produce. Strict workflows were defined, outputs were validated continuously, and human oversight over escalations and high severity incidents was maintained. Performance was also monitored over time – not just in testing, but in production, across real cases.

Consistency builds trust

The benefits didn’t show up everywhere, which is important to say. AI didn’t magically eliminate the need for skilled analysts. Instead, it changed how their time was spent.

The most measurable impact came through early investigation and triage. By accelerating data gathering, enrichment, and structuring, we saw five to ten times improvements in Mean Time to Investigate at that initial stage. Work that previously took twenty minutes could often be reduced to a few minutes, without cutting corners.

That matters, but not because speed is everything. Analysts were given the space to focus on judgement, rather than noise.

Analysts now have time to think

There’s a growing temptation in the market to treat AI adoption as a buying decision. You pick a tool, switch it on, and move on. Our experience suggests that approach rarely survives in a real-world situation

Some commercial solutions are valuable, while others lack the flexibility required in multi-customer environments. Internal development brings control, but also responsibility.

In practice, a multi-model, multi-solution approach proved necessary as it reflected how real SOCs operate. Elegance was never a driving factor.

This is where many organisations will struggle. The AI works, but implementation is often treated as a technological project, rather than an operating model change.

GenAI: Designed in, not bolted on

The uncomfortable truth is that doing nothing is no longer an option. The scale of threats, the pace of change, and the pressure on people mean the traditional SOC model will continue to fracture under load.

AI can help restore balance, but only when it’s introduced safely and deliberately. The role humans still play in security decision-making must continue to be respected.

The mistake many organisations will make is treating AI in the SOC as a technology upgrade. In fact, it’s an operating model decision, and it will expose every weakness in process, governance, and accountability that already exists.

The real question is whether your SOC is ready to absorb AI without increasing risk. That means knowing where AI should reason, where automation must remain deterministic, and where human judgement can never be removed. It means recognising that illumination comes from discipline and experience, not from adding more tools.

How do we know this? Because we’ve been there. AI was implemented inside a live, multi-customer SOC, where mistakes are visible and trust is earned the hard way.

The takeaway is simple. Illumination stems from an understanding on how people, process, and AI work together at scale.

Want to know how AI fits into your SOC? Join our live webinar on Tuesday 21st April to see how organisations can move forward with clarity rather than guesswork.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Business & Technology

UK workers spend more time on admin than European peers

Published

on


Ricoh UK has published research showing that UK workers spend more time on administrative tasks than employees in other surveyed European markets. The study found that UK workers spend 31% of their time on non-core admin.

The research covered workers in the UK, France, Spain, Italy, the Netherlands and Germany. Italy recorded the lowest share of time spent on admin at 21%.

The UK ranked ahead of Spain at 29%, Germany at 27%, France at 26%, and the Netherlands at 23%. UK office workers surveyed reported losing 15 hours a week to administrative work, or nearly two working days.

Only 51% of UK office workers surveyed said they spend most of their day on tasks that deliver direct value. The research also pointed to growing pressure on retention, with 15% saying they had considered leaving their organisation because of admin burdens alone.

Workplace Strain

The study suggests the issue is affecting team relationships as well as productivity. In the UK, 19% of workers said admin creates conflict or tension within their team, while 16% said they feel resentful towards colleagues with lighter admin loads.

Just 21% said administrative work is distributed equally, and 16% reported generational tension, with younger colleagues seen as resisting such tasks. Nearly a quarter, or 24%, said admin limits their productivity, while 21% said it leaves them less motivated or disengaged. Another 19% said it stifles their creativity.

Across Europe, 48% of employees surveyed said they were considering a new role within the next 12 months. The UK findings indicate admin is one of several pressures shaping how employees view their working day and their employer.

Ricoh also found a gap between how workers view the problem and how they think managers respond. Only 20% of UK workers said they feel their employer cares about admin overload, while 27% said managers underestimate the time it consumes.

Technology Questions

The research comes as businesses continue to review the role of automation and artificial intelligence in office work. In Ricoh’s survey, 34% of respondents reported feeling anxious about the prospect of being replaced.

Uncertainty over how technology will be introduced can add to frustration in workplaces already dealing with heavy administrative demands. The figures suggest the debate is not only about job redesign, but also about employer communication and staff confidence.

Ed MacArthur, Practise Lead – Process Automation at Ricoh UK, said: “UK organisations have pushed hard on digital transformation over the past decade, but that investment hasn’t always translated into simpler workflows for employees. Instead, many are dealing with layers of systems, reporting requirements and compliance processes that sit alongside their core role. That creates duplication, manual workarounds and a heavier administrative load than in markets where processes are either more standardised or less fragmented.”

He said the issue also reflected a mismatch between employee expectations and workplace systems.

Time Reclaimed

MacArthur added, “There is also a clear expectation gap. UK employees are used to consumer-grade technology in their personal lives and expect the same level of ease and integration at work. When workplace tools fall short or when automation is introduced without being properly embedded into day-to-day workflows, it adds friction. The result is a disconnect between the technology organisations believe they’ve invested in and the reality employees experience.”

The survey also asked workers what lighter admin loads would mean for their working lives. Nearly a third (31%) said they would enjoy their job more if they had more freedom to focus on creative tasks.

Another 30% said they would use the time to recharge, while 28% said they would invest it in learning new skills. These responses suggest employees see administrative work not only as a drain on time, but also as a barrier to development, recovery and engagement.

MacArthur said, “When a large share of the week is taken up by repetitive admin, it quickly drains motivation and limits the time people can spend on meaningful work. As the pressure builds, for some, it becomes a reason to look elsewhere. At the same time, uncertainty around AI is adding to the strain. Without clear communication and investment in skills, technology risks creating anxiety rather than confidence, especially as organisations add too many tools. Retention comes down to whether people feel supported and see a future for themselves in the company.”



Source link

Continue Reading

Business & Technology

ICO launches privacy campaign for parents of children

Published

on


The Information Commissioner’s Office has launched a public awareness campaign to help parents support children in making safer choices online. It is the regulator’s largest campaign focused on child online privacy.

Macclesfield-based design agency Nexer Digital designed and built the campaign’s online hub as the ICO’s digital delivery partner. Called Switched on to privacy, the campaign targets parents and carers of primary school-aged children and is built around the prompt “chat, choose, check”.

Research cited by the ICO found that 75% of parents are concerned their children are not making safe decisions online. The campaign aims to encourage more regular conversations about privacy between adults and children.

The online hub was built within the ICO’s existing website infrastructure. Project details show the work began in December 2025 and was delivered in two phases, starting with a mobile-first prototype tested with parents and carers before being developed into a live service.

The service runs on the ICO’s existing Umbraco platform. It was built to WCAG 2.2 Level AA accessibility standards and includes features already used across the regulator’s site, such as Welsh language translation and site search, while maintaining a separate campaign identity.

Digital build

The campaign also sits alongside the ICO’s Children’s code, which requires organisations to prioritise children’s privacy and apply high levels of data protection by default. Alongside raising awareness, the initiative is intended to influence behaviour by giving parents practical tools and guidance they can use.

Nexer Digital also added analytics tools to show how users interact with campaign material. The ICO can track activity including downloads, bookmarks and shares to identify which resources are most useful to parents preparing for conversations about online privacy.

Simon Wissink, Account Director and Partner Manager at Nexer Digital, said: “Working with the ICO on such an important and high-profile campaign has been a valuable opportunity for our team. The challenge was to create an experience that is not only accessible and easy to use but genuinely empowers parents to take action. Through user research and iterative design, we’ve built a platform that supports meaningful engagement and can evolve with future campaigns.”

The project adds to a broader relationship between the two organisations, with Nexer Digital serving as the ICO’s digital delivery partner since 2025. Founded in 2007 and formerly known as Sigma, the agency works across research, design and development projects for public, private and not-for-profit organisations.

Parent focus

This campaign focuses on parents of younger children rather than children themselves. By targeting primary school-aged users, the ICO is addressing a stage when many families are beginning to engage more regularly with apps, games, connected devices and online services used by children.

Craig Wyna, Head of Digital at the ICO, said: “Switched on to privacy is about giving parents the confidence and tools they need to support their children in navigating the digital world safely. Nexer Digital has played a key role in bringing this vision to life through a platform that is accessible, engaging and built around user needs.”

The scale of the campaign is notable for the ICO, which has increasingly combined regulation with public-facing education on data use and privacy. The 75% figure from the campaign research underlines the level of concern among parents about children’s online decision-making and gives the regulator a clear public information brief.

For Nexer Digital, the project also reflects demand for digital public services that combine accessibility standards, user testing and measurement tools in a single service. The campaign hub was designed not only to host guidance but also to give the ICO a clearer view of how people use the content, including whether they save or share it.

The agency is part of the wider Nexer Group, a Swedish technology company with more than 2,300 staff worldwide. In the UK, it has worked with organisations including NHS England, AstraZeneca and the Department for Education.

The campaign is intended to help parents have regular privacy conversations with their children using the “chat, choose, check” framework.



Source link

Continue Reading

Business & Technology

Your.Cloud acquires Pure Cloud Solutions in UK push

Published

on


Your.Cloud has acquired Pure Cloud Solutions, expanding its presence in the UK market.

Pure Cloud Solutions is a managed IT and telecoms provider based in Tamworth. It serves businesses across the West Midlands and elsewhere in the UK and Europe, and will continue to trade under its existing name with its current team and leadership.

The acquisition adds another UK business to a group that operates through more than 40 companies across several European countries. Your.Cloud employs about 1,500 people and generates annual turnover of more than €350 million.

Your.Cloud backs local managed service providers while allowing them to keep their brands and customer relationships. Pure Cloud Solutions will continue to be led by Chief Executive Officer Jamie Lake.

The Tamworth company was founded in 1990 by Martin Lake and Darren Lake. It began in telephony and structured cabling before expanding into cloud, connectivity and managed IT services over more than three decades.

UK expansion

The deal is part of Your.Cloud’s push to build a broader managed services business in the UK and Europe. Financial terms were not disclosed.

For Pure Cloud Solutions, the acquisition comes as demand in the IT services market continues to shift, particularly around cybersecurity and artificial intelligence. The company said day-to-day customer relationships would remain unchanged after it joins the group.

Jamie Lake, Chief Executive Officer of Pure Cloud Solutions, said: “We’ve spent over 35 years building something we’re proud of – a business that genuinely knows its clients and delivers without the nonsense. Joining Your.Cloud lets us keep doing exactly that, while giving us the backing to move faster and offer more. The market is changing quickly, particularly around AI and cybersecurity, and being part of the Your.Cloud group gives us the platform to stay ahead of it. Nothing changes for our clients in terms of who they deal with – but a lot more becomes possible.”

Local model

Your.Cloud has built its business through a decentralised model focused on acquiring and supporting managed service providers in local markets. Those businesses keep their identities while drawing on shared expertise and resources across the group.

That approach has helped it build a network of companies serving more than 25,000 businesses across Europe in areas including workspace, security, infrastructure and connectivity. Pure Cloud Solutions now joins that portfolio as Your.Cloud seeks to expand further in the UK.

Nils Vermeulen, who oversees the TICTS segment at the group, said Pure Cloud Solutions fits the type of business Your.Cloud wants to add in the market. He cited its customer relationships and management team as key reasons for the acquisition.

Nils Vermeulen, General Manager of the TICTS Segment at Your.Cloud, said: “Jamie and his team have built a genuinely strong business – one with deep client relationships and a clear sense of what good service looks like. That’s exactly the kind of business we look to partner with. Pure Cloud Solutions’ track record and entrepreneurial leadership make them a valuable addition as we continue to expand across the UK. We’re delighted to welcome them to the group.”



Source link

Continue Reading

Trending