By Karina Carlos A fictional story about security operations and automated alert closure. All people, organizations, systems and events are invented. Vera had already moved Jo’s name on the staffing sheet when Samir put a printout beside her keyboard. It contained twelve case numbers. None had appeared in the security team’s morning queue. “Are these incidents?” she asked. “I don’t know yet.” At Bellrow Logistics, Vera ran security operations for a network of warehouses. Six

How security leaders can evaluate the cases that automation removes from an analyst’s view Karina Carlos A shorter security-alert queue can represent useful work. Analysts may have more time for cases that require investigation. But the queue shows only what remains available for review. If an automated system closes part of the incoming work, evaluating the analyst’s screen alone leaves part of the process unexamined. The question for a security leader concerns the cases tha