Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
Conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage.
Task automation exposure
Low exposure
Exposure basis
[v4/median] score 35 (raw 35 | A 25 / B 35 / C 35 | modality: other) AI tools can rapidly parse logs, identify known vulnerability signatures, and map initial attack paths, but they lack the contextual reasoning, hypothesis testing, and nuanced judgment required to fully evaluate complex damage and identify novel vulnerabilities in a professional (capable: SIEM with AI/ML (e.g., Splunk, Microsoft Sentinel) + Threat Intelligence Platforms)
0 capabilities · 1 occupations
Basis
How exposure was assessed
[v4/median] score 35 (raw 35 | A 25 / B 35 / C 35 | modality: other) AI tools can rapidly parse logs, identify known vulnerability signatures, and map initial attack paths, but they lack the contextual reasoning, hypothesis testing, and nuanced judgment required to fully evaluate complex damage and identify novel vulnerabilities in a professional (capable: SIEM with AI/ML (e.g., Splunk, Microsoft Sentinel) + Threat Intelligence Platforms)
How much of this task's output current AI can produce or substantially assist.
Best current model strength on any capability this task requires.
This is an assessment of technical feasibility plus published evidence - not a forecast. Even fully automatable tasks are often not automated, because of cost, verification, liability, regulation or the fact that the task is bundled with other work.
Occupations
Occupations that perform this task (1)
Importance is the O*NET-style weight of this task within each occupation. The same task can be highly exposed but peripheral to one job and core to another.
| Occupation | Industry | Importance | Role | Occupation AI exposure |
|---|---|---|---|---|
| Information Security Engineers | Cross-industry | 4.2/5 | core | 14 |
Evidence
Evidence (0)
No evidence item is mapped to this specific task yet. The exposure figure above rests on the v1 editorial baseline and on the capability assessment, and should be treated as low-confidence. Pages with fewer than 0 evidence items are excluded from sitemaps.