# Why the autonomous SOC Is the wrong goal

Page: https://stenobird.com/podcast/safe-mode-podcast-6421323/why-the-autonomous-soc-is-the-wrong-goal
Text version: https://stenobird.com/podcast/safe-mode-podcast-6421323/why-the-autonomous-soc-is-the-wrong-goal.md
Podcast: [Safe Mode Podcast](https://stenobird.com/podcast/safe-mode-podcast-6421323)
Published: 2026-06-11T15:47:49+00:00
Episode link: https://soundcloud.com/podcast-defensescoop-com/safe-mode-6-11-26_01
Audio file: https://feeds.soundcloud.com/stream/2337493370-podcast-defensescoop-com-safe-mode-6-11-26_01.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/safe-mode-podcast-6421323/episodes/why-the-autonomous-soc-is-the-wrong-goal
Duration seconds: 2032

## Resource

On this week's episode, we're joined by Mike Nichols, General Manager of Security at Elastic, fresh off the Gartner Security and Risk Summit in the D.C. area, where AI dominated every conversation on the conference floor. Mike walks us through what CISOs are actually asking about, what a real agentic SOC looks like in practice, and why keeping humans on the loop is the key philosophical distinction that separates a thoughtful AI implementation from a reckless one. The conversation covers "tribal knowledge," shadow AI, prompt injection, model sovereignty, and the exploding attack surface that AI agents themselves create, with Mike making the case that AI adoption is a dial and not a switch, and that transparency, explainability, and a healthy dose of skepticism are the foundation of building trust that actually sticks.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/safe-mode-podcast-6421323/episodes/why-the-autonomous-soc-is-the-wrong-goal/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/safe-mode-podcast-6421323/why-the-autonomous-soc-is-the-wrong-goal.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.