Eventus Security used the CyBe AI Summit in Bengaluru to call for a shift to decision-centric security operations, arguing that security teams should move beyond alert-heavy monitoring.
At the event, executives from the managed security services provider said security operations centres should focus less on collecting large volumes of data and more on helping analysts make faster decisions on the threats that matter. They added that artificial intelligence can support that shift when combined with human oversight and established processes.
During a session on architecting an AI-driven security operations centre, Shriram Prabakaran, Regional Sales Head - South India, and Malcolm Rafter Pinto, Technical Lead - R&D, outlined a model built on contextual intelligence, automation and analyst input. They said it is designed to reduce alert fatigue and improve incident response speed without removing people from critical decisions.
The discussion comes as many Indian enterprises manage growing digital estates, multiple security tools and rising alert volumes. In that environment, the challenge is less a lack of data than identifying which signals point to immediate risk.
Prabakaran said the issue is one of context rather than volume. "Modern SOCs do not have a shortage of data. The real challenge is converting that data into context and actionable decisions quickly enough to contain a threat. AI can help security teams correlate signals, prioritise risk and accelerate response, but its value is realised only when it works alongside experienced analysts, well-defined processes and appropriate human oversight," he said.
This approach requires organisations to connect data, workflows and response mechanisms across their security environments rather than continue adding separate tools. A more integrated setup, Eventus Security said, can help analysts cut through operational noise and investigate incidents with greater confidence.
Data foundation
Pinto said an AI-led model depends first on how security data is prepared and linked to business context. He pointed to the need to normalise, enrich and correlate signals from different systems before automation can produce useful results.
"Building an effective AI-driven SOC starts with creating the right data foundation. Security signals from different tools need to be normalised, enriched and correlated with business context before automation can produce meaningful outcomes. AI adds the greatest value when it helps analysts cut through noise, investigate faster and focus on the threats that matter most," he said.
That view reflects a broader debate across cybersecurity over AI's role in security operations centres. Vendors and service providers have increasingly promoted AI tools for detection and response, but buyers have also raised concerns about false positives, poor integration with existing systems and the risks of relying too heavily on automation during complex incidents.
Eventus Security said its operating model combines threat detection, behavioural analytics, contextual threat intelligence and automated response workflows. It presented those elements as a way to identify threats earlier, improve investigations and create more consistent responses across customer environments.
The company also stressed that AI should support analysts rather than replace them. That distinction has become central in enterprise security discussions, as organisations look to reduce manual workloads while remaining cautious about handing over judgement in incidents with operational, financial and reputational consequences.
Prabakaran returned to that theme in a further comment on what enterprises should expect from AI in cybersecurity. "AI in cybersecurity must deliver measurable operational outcomes, not simply add another layer of technology. The focus should be on helping analysts make better decisions, reducing the time between detection and response, and ultimately strengthening the organisation's cyber resilience," he said.
According to the organisers, the summit gathered more than 900 cybersecurity professionals, over 100 CXOs and more than 60 speakers across four tracks focused on artificial intelligence in cybersecurity. Eventus Security said it supports more than 500 enterprise customers across Asia Pacific, the Middle East, Europe and the Americas, and operates round-the-clock cyber defence centres.