What Technology Driven Is Not

Many self-proclaimed technology driven companies tend to arm themselves with the latest software and hardware. There’s a common belief that simply acquiring the hottest buzzwords of the year will instantly enhance their capabilities in areas like security, machine learning, or AI.

However, being technology driven does not equate to buying and installing software that magically solves all problems. The most advanced Endpoint Detection and Response (EDR) system doesn’t guarantee that the collected data will be insightful. This principle applies across the board; even cutting-edge machine learning systems won’t yield reliable outcomes without quality data for training.

There’s always a need to minimize false positives and extraneous data from the system. The technology itself can’t recognize these issues, but you can. Taking proactive measures to fine-tune your systems truly exemplifies being technology driven, rather than simply being driven by technology.

What Technology Driven Is

It’s perfectly acceptable to depend on technology; in fact, it’s increasingly reliable. Generally, one can trust technology to perform its intended functions. For instance, a firewall can segment networks and manage traffic effectively, while a Security Information and Event Management (SIEM) system aids in intelligence and event management. Similarly, a Security Orchestration, Automation, and Response (SOAR) system enhances your response protocols.

These technologies are invaluable tools that, when tailored to your specific needs and expectations, can drive your operations. The key question to answer is: What do you really want from these technologies?

For example, consider a fitness tracker. You can purchase one to monitor your daily activity, but is the step count genuinely accurate? Your stride length varies significantly based on your height. Personally, I often climb a low staircase for coffee, but the tracker frequently fails to register this activity. The simple fix? Adjust the stride length settings for more accurate results.

Facial recognition technology serves as another pertinent example. Without high-quality images of individuals and sufficient data, effective results are unattainable.

In the realm of machine learning, training algorithms to identify phishing emails is most effective when using your specific data. The unique characteristics of your organization may lead to patterns that appear suspicious but are completely normal in your context.

In summary, to achieve your individual objectives, manual intervention is essential for every technology to function optimally.

A Quick Anecdote

Several years ago, I was invited to consult for a client who had just installed a SIEM solution. At that time, I was a Security Intelligence Analyst and was asked to provide guidance.

After a couple of days of collecting data from their firewall, the client posed a straightforward question: "We’re seeing numerous events related to a blocked IP address; why is this happening?" Indeed, their firewall had blocked that IP address, but I had no insight into why someone within the organization decided to do so.

This situation perfectly illustrates the distinction between being driven by technology and being technology driven. The reality was that the new tool didn’t change anything; the SIEM merely highlighted information that was already present.

You have the power to leverage technology effectively, enhancing overall adoption and improving processes. The keyword here is adjustment. For smoother operations, it’s advisable to adapt, maintain, and integrate technology within your environment.

"Remember, this machine lacks intelligence—please use your own."

Are you truly technology driven, or merely driven by technology?

Please leave a 👏 and treat each other with kindness.