Harmonizing paradoxical tensions in SOCs: A Strategic model for integrating AI, automation, and human expertise in cyber defense and incident response

Security operations centers (SOCs) from public and private industries are under pressure to cope with the surge of cyberattacks, making paradoxical tensions in strategic navigation within security operations centers (SOCs) a priority. Our research advances our understanding of ambidexterity in the cybersecurity field and introduces an equilibrium path for adaptability, consistency, expediency, and authority paradoxes through the strategic integration of artificial intelligence (AI), automation, and human expertise. We developed a conceptual model that incorporates insights from the identified paradoxical tensions, cybernetic, organizational paradox, complexity, and decision-making theories, underlining the importance of leveraging technological advancements while retaining the indispensable insights of human judgment and emphasizing the iterative loop required for SOCs to adapt to new threats and maintain a consistent, authoritative approach. Our findings indicate that the dynamic equilibrium of paradoxical tensions is not a fixed state but a perpetual journey of adaptation and refinement in today's complex digital landscapes.