NCC Group interviews
NCC Group interviewsWhat interviewers look for
“Cyber is a team effort and it's not limited to coding or technical know-how.”
NCC Group CareersCareers page
Proving a finding
“The operational question is whether the AI tool produces results that can be validated, prioritised, and converted into remediation at scale.”
NCC GroupWebinar recap
“Human testers play an essential role in validating automated findings, minimizing false alarms, and providing valuable insights into the context of each vulnerability.”
Steven van der BaanNCC Group research
Humans validate the findings
Does this result prove an access-control flaw? Practise the check.
ExamplePrioritising by exposure
“Human testers can interpret these nuances and prioritize findings based on their potential impact on the organization’s objectives.”
Steven van der BaanNCC Group research
Detection and its gaps
“If your test harnesses are insufficient, then your results are going to be insufficient as well, irrespective of how good the model itself is.”
David BrauchlerTechnical Director, NCC Group
Results depend on the harness
Does this detector find enough attacks? Practise the evaluation.
ExampleWhat AI changes
“AI is a force multiplier for researchers. It’s not a replacement for humans in cyber security, it amplifies effectiveness, but it’s not magic.”
Andy DavisGlobal Research Director, NCC Group
A force multiplier, not magic
Does this detector find enough attacks? Practise the evaluation.
ExampleLast reviewed