AI can automate tedious security work like environment mapping and evidence collection that takes weeks for large organizations, but it can't yet understand business context or make judgment calls on risk. Human oversight will stay essential for the next three to five years as the technology improves.
Okay, so AI at a high level, it's an enabler and a risk. You know, I think the things, I think you should automate some of it, like the initial mapping, the initial, when you're initially going into an environment, you need to initially map, get the evidence collection, things like that. I think you can automate that process because that's so manual. Oh my God. Depending on the size of the organization, I remember doing assessment, it just took, I mean, weeks sometimes to get all of the evidence. If you could automate that, like even to automate and get it into folders to be able to sort, where the policies were, this or that, that would be immensely helpful. I think that can be automated. I think that you need the human element when you're getting into the intrinsic information that is about the business that I don't know that AI can really dig into yet. I do think that we're going to get into a space in the next 3 to 5 years after we've tweaked these machine models because it's just too new right now. I think we can get there, but I don't think like judgment calls should be— I think, you You need to have a human there to be able to look through what those final scores are.
