Cloud Security Podcast· Staffel 6· Folge 45
How to Build Trust in an AI SOC for Regulated Environments
Mittwoch, 19. November 2025 · 42 min
Kapitelklicken springt direkt hin
Shownotes
How do you establish trust in an AI SOC, especially in a regulated environment? Grant Oviatt (linkedin.com/in/grant-oviatt-882111a0), Head of SOC at Prophet Security (prophetsecurity.ai) and a former SOC leader at Mandiant and Red Canary, tackles this head-on as a self-proclaimed "AI skeptic". Grant shared that after 15 years of being "scared to death" by high-false-positive AI, modern LLMs have changed the game .
The key to trust lies in two pillars: explainability (is the decision reasonable?) and traceability (can you audit the entire data trail, including all 40-50 queries?) . Grant talks about yje critical architectural components for regulated industries, including single-tenancy , bring-your-own-cloud (BYOC) for data sovereignty , and model portability.
In this episode we will be comparing AI SOC to traditional MDRs and talking about real-world "bake-off" results where an AI SOC had 99.3% agreement with a human team on 12,000 alerts but was 11x faster, with an average investigation time of just four minutes .
Guest Socials - Grant's Linkedin (linkedin.com/in/grant-oviatt-882111a0)
Podcast Twitter - @CloudSecPod (twitter.com/cloudsecpod) (twitter.com/CloudSecureNews)
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
-Cloud Security Podcast- Youtube (youtube.com/c/CloudSecurityPodcast?sub_confirm…)
- Cloud Security Newsletter (cloudsecuritynewsletter.com)
If you are interested in AI Cybersecurity, you can check out our sister podcast - AI Security Podcast (open.spotify.com/show/3nV4eijfzdHKIvDOaycVII)
() Introduction() Who is Grant Oviatt?() How to Establish Trust in an AI SOC for Regulated Environments() Explainability vs. Traceability: The Two Pillars of Trust() The "Hard SOC Life": Pre-AI vs. AI SOC() From AI Skeptic to AI SOC Founder: What Changed? () The "Aha!" Moment: Breaking Problems into Bite-Sized Pieces() What Regulated Bodies Expect from an AI SOC() Data Management: The Key for Regulated Industries (PII/PHI) () Why Point-in-Time Queries are Safer than a SIEM () Bring-Your-Own-Cloud (BYOC) for Financial Services () Single-Tenant Architecture & No Training on Customer Data () Bring-Your-Own-Model: The Rise of Model Portability () AI SOC vs. MDR: Can it Replace Your Provider? () The 4-Minute Investigation: Speed & Custom Detections () The Reality of Building Your Own AI SOC (Build vs. Buy)() Managing Model Drift & Updates() Why Prophet Avoids MCPs: The Lack of Auditability () How Far Can AI SOC Go? (Analysis vs. Threat Hunting)() The Future: From "Human in the Loop" to "Manager in the Loop" () Do We Still Need a Human in the Loop? (95% Auto-Closed) () The Red Lines: What AI Shouldn't Automate (Yet) () The Problem with "Creative" AI Remediation() What AI SOC is Not Ready For (Risk Appetite)() Gaining Confidence: The 12,000 Alert Bake-Off (99.3% Agreement) () Fun Questions: Iron Mans, Texas BBQ & Seafood
Thank you to Prophet Security (prophetsecurity.ai)for sponsoring this episode.
