Unverified50% confidenceFactExact time
While advancing automation, Sophos explicitly emphasized the retention of human oversight.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/9/2026
First Seen
Valid until: 1/7/2027
Sources
Related Entities
Related Claims
UnverifiedA more prudent approach is to add a human review step before the publishing node, letting automation handle production while humans make the final decisions.66% similarUnverifiedSophos has defined three operating modes: Notify (notification only, providing recommendations without taking response action), Collaborate (collaboration, where response requires direct customer involvement), and Authorize (authorization, where Sophos can respond directly on behalf of the customer)65% similarUnverifiedThe core of traditional SOAR (Security Orchestration, Automation and Response) is predefined playbooks, where when a certain type of alert is triggered, the system executes a fixed process written in advance by humans.64% similarUnverifiedSOAR (Security Orchestration, Automation and Response) is currently the most mainstream type of automation platform in SOCs, automatically handling tasks such as alert triage, ticket creation, and threat intelligence queries through pre-written playbooks.62% similarUnverified将SOP作为Agent的动态知识库形成「执行→复盘→更新→再执行」的闭环迭代，通常依赖工具调用（Function Calling）能力实现60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/991249API
curl https://kongchang.com/api/v1/knowledge/claims/991249MCP
get_claim(id=991249)