Mate Security debuted with $15.5M to modernize SOCs; Oren Saban highlights a key shift for CISOs

Many SOCs still operate with manual triage and outdated playbooks, a challenge that Mate hopes to modernize following its fresh investment. Last month you raised $15 million. What top three operational changes should a chief Information Security officer prioritize today to modernize their socks?

The ability to build knowledge and improve from day to day and, and really utilize the fact that you investigate stuff and your team investigates every day and become smarter, not do the same thing twice. We have one customer of ours, he told me, I tell my people, I'm very lazy. I don't like to do the same thing twice. And that's how we want to work here. So you should stop treating security operations like every alert is brand new. The stock has knowledge and it generates massive intelligence every day. Investigation, decisions, false positive patterns, environmental baselines. But most of it disappears when the ticket closes. And then what happens is that the analysts go back, they try to figure out, have we seen this before? But this takes a lot of time. So before you invest even in any new detection tool or automation platform, you should invest in capturing the knowledge that you already have and preserving what your analysts already know. And this means document investigation outcomes, record why alerts were dismissed, and try and track which security exceptions are approved and why. And basically maintain a living runbook and updates of what's happening in your current day to day.