Thank Heaven For Artificial Intelligence!

OK, maybe the above title overstates my enthusiasm, particularly since much of the capability of the new tools is unproven and several cases of "hallucination" are on clear display. But I must say that, properly configured, there's at least one very strong case for rolling out an AI tool or two.

Log analysis.

Humans could never do log inspection very fast. And going back at least ten years, we've been buried in logs every day. Scripting helps but even running them and collating the results takes time. And the attacks, failures and problems pile up faster and worse when both the attackers and the innocent difficulties are AI-powered. This all means that the solutions need AI power as well.

We already have SIEMs and homebrew solutions - and we're already seeing AI augmenting them. My guess is that this current state of affairs is the eventual solution, particularly since AI can only get better. I hope people's understanding of it gets better as well. New tools need enough people to oversee results and to dodge unintended consequences.

General Things To Remember (valid beyond info tech as well)

Thing #1: Success is about how you handle interruptions.

Thing #2: Concentrate on what you CAN control, not on what you cannot.

Thing #3: Process is important, but particularly when it gets results.

Thing #4: Always have a backup plan, be it storage, disaster recovery, insurance...

Thing #5: Know a lawyer.