Can Your SOC Keep Pace? Rethinking Security Coverage in the Age of AI
Beyond alert queues: where AI agents, analyst expertise and human judgement meet.
CISO 360 Executive Roundtable | Thursday 19 November 2026
An invitation-only, peer-to-peer discussion for CISOs, SOC leaders and senior cybersecurity practitioners.
đź“Ť Venue: London
🗓️ Date: 19 November 2026
⏰ Time: 17:30–21:30
Are we measuring how much work our SOC completes, or how much of our threat exposure it actually covers?
How are we transforming the next generation of security operations?
It is said that UK SOCs fully investigate and validate just 52% of alerts on average. But the challenge goes beyond alerts left in the queue. What about the threat hunts that never happen, intelligence advisories that go unactioned, or emerging threats that remain unexplored because teams simply don’t have the capacity?
As attackers increasingly operate at speed and scale, security teams face a growing imbalance between the threats they need to investigate and the human resources available to do so. Better detection alone may not close this gap. When the capacity of human analysts determines the extent of security coverage, how can defenders keep pace?
AI agents are opening up possibilities for a different SOC operating model — one where technology takes on more of the groundwork across investigation, threat hunting and threat intelligence, while analysts focus on the findings, decisions and judgement that require human expertise.
But does greater automation necessarily mean better security coverage? How do we demonstrate its effectiveness, establish trust and maintain appropriate human oversight?
Join fellow CISOs and security leaders for an open, practitioner-led discussion to challenge assumptions, compare approaches and explore what changes when security operations move beyond alert queues towards a model combining human strategy with machine scale.
What does this all mean in practice for CISOs? Where should autonomy begin and end? How do we measure success when coverage, rather than alert throughput, becomes the priority?
Join fellow CISOs and security operations leaders for a memorable private dining experience while you discuss what it takes to evolve the SOC operating model, make better use of analyst expertise and close the gap between threats detected and threats investigated.
This is an opportunity to step away from day-to-day operational pressures and benchmark approaches with CISO peers facing similar challenges.
Share what is working, challenge assumptions and explore the practical opportunities and limitations of AI agents in security operations.
Complimentary attendance | Invitation-only | The Chatham House Rule
Places around the table are limited to encourage meaningful discussion and ensure every participant has a voice.
We look forward to meeting you on 19 November in London.
CISO 360 Team
Pulse Conferences
Sponsored by
Hosted by
About Dropzone AI
Dropzone AI weaponizes LLMs for cyber defenders, delivering the Agentic SOC: AI agents that collaborate 24/7 to beat attackers at scale. Dropzone is ready to go on Day 1 and integrates into your existing tools. AI agents start work immediately to investigate alerts, respond to emerging threats, and proactively hunt attackers. Autonomously and infinitely scalable, with no hidden humans in the critical path. Dropzone works with enterprises and MSSPs including ECS, Avalara, UiPath, and Zapier, and is actively protecting over 300 companies.
Discussion co-steered by a strategist and CISO
Questions for the Roundtable
- Where does the real coverage gap sit? In alerts that remain uninvestigated, threat hunts that never ran, or intelligence advisories that no one actioned?
- What should arrive in front of an analyst as a validated finding rather than a raw alert? Where should human judgement and oversight remain essential?
- How should hiring, measurement and Board reporting shift when coverage, rather than throughput, becomes the metric? How do we demonstrate that this translates into better security outcomes?
Timings – Wednesday 19 November 2025
17:30-18:30Â Â Â Â Welcome Drinks Reception
18:30-21:00Â Â Â Â Discussion and Private Dinner
21:00-21:30Â Â Â Â Conclusions + Optional Post-Event Drinks
Who Should Join?
CISOs, Directors and Heads of Security Operations, Cyber SOC, Threat Detection and Response, CSIRT, Cyber Defence and senior cybersecurity practitioners.
Please note that sales, marketing, business development, consultants or media are not permitted to participate in this private event.
Practicalities
- There is no cost to attend. Places around the table are limited.
- There is a limit of two individuals per organisation.
- Conducted under The Chatham House Rule.
- Co-chaired by a leading Chief Information Security Officer and a Strategist
- Pulse Conferences is your Master of Ceremonies.