Automating Ethics

I joined Phantom as few weeks ago to lead our partner program.  A number of factors attracted me to automation and the opportunity at Phantom.

When it comes to automation, saving time is clearly a big driver.  Customers are routinely taking manual, labor intensive processes that can take hours and reducing them to automation tasks that run in seconds.  We’ve shared several examples in the Playbook Series on our blog.

Faster security is nice.  It’s not the only benefit that comes with automation though.  Security can also be improved, like using automation to drive accuracy and consistency in the incident response process.  You can imagine that as alert volume increases, junior analysts become overwhelmed with information, causing them to overlook key indicators. Even experienced analysts might be tempted to make “gut calls” based on previous incidents and incomplete information. With automation, the same data is gathered for every alert, and every alert is investigated and memorialized the same way, every time.

Coverage of security automation is growing.  This recent article in SC Magazine introduces yet another angle.   Here’s a stat from that article that caught my attention:

Over a quarter (28 percent) of cyber-security professionals compromise their ethics to pass audits, likely due to growing network complexity and disparate technology, security and more to keep cyber-criminals at bay.


Saving time is one thing, compromising ethics to get your job done is something entirely different.  No one should be faced with such a dilemma, and I think automation can help here as well.  No doubt, we’re just starting to understand the impact automation and orchestration can have on the industry.  I’m looking forward to being part of the team leading this change at Phantom

Eric Hoffman
Partner Manager, North America

About Phantom:
Phantom, which was recognized as the most innovative company at the 2016 RSA Conference, automates and orchestrates key stages of security operations from prevention to triage and resolution; delivering dramatic increases in productivity and effectiveness. Ranging from simple automation to fully autonomous response, Phantom lets you choose the best balance that fits your organization’s needs while increasing security and accelerating security operations. Focused on closing the security gap by enabling enterprise security operations to be smarter, faster and stronger; Phantom provides the flexibility to connect in-house and third-party systems into one consolidated, integrated and extensible platform. Phantom was founded by enterprise security veterans Oliver Friedrichs and Sourabh Satish who have helped propel companies like Symantec, Sourcefire, Cisco and others to success. For more information visit: