At ISOG’s “I AM SECURE 2025” Forum, Human Managed CEO Karen Kim explored how human intelligence can inspire a new kind of AI-powered cybersecurity — one that’s truly primed for outcomes.

I've always found how our brains (and gut) works quite fascinating. Like when you're walking through a familiar area and yet something just feels off. You can't quite put your finger on it, but your brain is screaming that something's not right.

That's priming at work. Your brain is constantly taking fragments of memory, experience, and knowledge, then mashing them together to make split-second judgments about new situations. It's what makes human intelligence so powerful, and so frustratingly hard to replicate in machines.

This disconnect between human intuition and machine capability was at the heart of our CEO Karen Kim's recent keynote at the ISOG Forum 3 (I AM SECURE 2025) event, where she unpacked this question: 

How do we build autonomous security operations that actually work?

Thekeynote opens with a thought experiment that perfectly captures the priming problem.

“Imagine walking down a street in Makati and seeing a Jollibee—but instead of the cheerful bee mascot, Ronald McDonald is standing there. There's a green car parked out front, doors wide open, completely empty.”

Your brain would immediately flag this as suspicious. Not because any single element is inherently dangerous, but because the combinationdoesn't fit your mental model of how the world should work. That's priming in action.

“This is what human intelligence is all about. It’s what makes us so powerful,”

But while humans excel at judgment, reflection, and emotion, our intuition is also biased and inconsistent. Machines, on the other hand, are the opposite — consistent, fast, and tireless, yet blind to context.

And that, according to Karen, is the challenge modern cybersecurity faces today.

In today’s hyper-connected environments, cybersecurity teams are overwhelmed — billions of alerts, overlapping data streams, and constant fatigue. Relying solely on either humans or machines is no longer enough.

“Modern security operations cannot succeed without machines being primed for outcomes,”

This means going beyond automation for automation’s sake. It’s not about feeding machines more data; it’s about teaching them to interpret, contextualize, and act the way humans do — but at scale and without bias.

Six Intelligence Blocks: Teaching Machines to Prime

Instead of building one massive AI solution,we took a page from how human intelligence actually works.Each part of the system represents a different kind of “intelligence,” working in parallel toward specific outcomes:

Discover – Uses linguistic and spatial intelligence to map and understand the environment.

Detect – Leverages numeric and sensory intelligence to spot anomalies and shifts from baseline.

Profile – Builds emotional and reflective intelligence by assessing asset trust and behavioral patterns.

Triage – Combines numeric and reflective intelligence to prioritize and reduce noise.

React – Informs reflective intelligence to determine the best next steps.

Resolve – Uses emotional intelligence to assign response actions with confidence and context.

Together, these blocks form what Karen described as “autonomous SecOps” — not a single, monolithic AI, but a network of specialized models that mirror how humans think, feel, and decide.

“Autonomous SecOps is not about creating one giant solution. It’s about creating specialized models, each primed for a specific input, process, and output.”

As cybersecurity leaders rush to adopt AI, the key takeaway from Karen’s keynote is clear: AI should not replace human judgment — it should be trained by it.

By blending human intuition with machine consistency, organizations can move toward truly intelligent SecOps — one that’s proactive, context-aware, and outcome-driven.

“At Human Managed, we are not only building (autonomous SecOps) — we are running it today.”

If there's one thing I took away from both the keynote and conversations at ISOG Forum 3, it's this: The future of cybersecurity isn't about choosing between human intuition and machine processing. It's about training machines to prime: to combine fragments of context into meaningful judgmentso that when human and machine intelligence come together, we achieve something neither could alone.

When humans and machines learn from each other, cybersecurity transforms from reactive firefighting to a living, learning system — one that’s always a step ahead.

Want to dive deeper into how these six intelligence blocks work together? 

Watch Karen's full keynote from ISOG Forum 3

, where she breaks down each model with real-world examples of autonomous SecOps in action.

When Machines Learn to Prime: Rethinking Autonomous Security Operations 

For decades, true security operations (SecOps) were the privilege of large enterprises. As Karen Kim, CEO of Human Managed, explains:

“Traditionally, security operations were only available to companies with the resources—the access to technology, teams, and skill set. But now … the barrier to entry to having 24/7 SecOps has been removed.”

“SecOps stands for Security Operations. SecOps as a whole is a series of processes put together to protect an environment, to protect the enterprise.”

 The purpose is simple: ensure alerts are prioritized, understood, and resolved before they escalate into crises.

This creates bottlenecks. As Karen notes, 

“Sometimes they don’t even have enough resources that can analyze and do something about these alerts.”

breaking down security operations into micro-decisions

. By integrating AI, repetitive triage decisions can be fast-tracked, freeing human teams to focus on strategy and higher-order threats.

“Because we have gathered this knowledge of how decisions are being taken in a cybersecurity context, we’re able to work with AI to build, you know, fast track some of the decisions.”

For executives leading digital transformation, this is more than an IT upgrade. It’s about ROI and resilience:

Improved visibility into business-critical risks

Faster response cycles that protect brand and compliance

In short, 24/7 security is no longer gated by budget or team size. As Karen puts it: 

“Build knowledge, capture knowledge, make it reusable. Don’t do the same things over and over again.”

This article is based on the first installment of our new 

, where Karen Kim introduces what SecOps is and why it matters.

In the next episodes, we’ll dive deeper into:

, showing how decisions are automated and scaled.

If you want to see how SecOps can transform your organization, stay tuned for the 

Why the Barrier to 24/7 Security Operations No Longer Exists 

Machine stories are about machines. Period. No drama, suspense or fantasy — just plain simple machines, and how they work. To get this started, the simple machine that humans think of are complex is what will be covered in this story. The computer!

This story is part of a trilogy which takes us through this simple machine's journey.

Computers are not magical. Yes they can beat humans in chess, go, or jeopardy, but it is not a mysterious being that can do multiple things at the same time. It’s just a simple machine no different than a light switch and can only do a very few things: it’s just that they are incredibly fast and tiny. They are good at doing specific simple things one after another in an orderly sequence as they are told in a consistent manner without getting bored. No questions asked!

If their specific simple task is to ask questions, then questions will be asked. A computer’s super power is its speed, not complexity.

Computers work on electricity and electricity travels at the speed of light, which is around 299,792 kilometres per second. Electricity travels through wires at around 1/100th the speed of light due to the weight of the electron streams. So it would take approximately 2 minutes to turn on a light bulb in the moon connected by a long pair of wire from earth. This speed allows a google search result to be returned in a fraction of a second. Hence the human’s obsession with the computer since they prefer their search result displayed instantly, not mailed to them a few days later.

What a computer can do hasn’t changed since it’s birth (1940). It still does the same few simple things, except that it has gotten faster, tinier, and cheaper.

 They are made of a few parts with a specific mission combined together to form a machine that helps humans.

Computers operate in binary and only understands two possible states: “on” and “off”, which is called a bit. The bits in a computer either has electricity (on) or not(off). There is no gray area. The only thing that has to move in a computer is electricity and the flow of this electricity is controlled by transistors (diagram below). The only decision this machine takes is to turn “off” or “on”, very similar to a light switch!.

How a machine works is usually understood by looking inside it. Different chips, plugged into a board is what can be seen if a computer is opened. Yes! looks can be deceiving, unlike a mechanical machine, staring inside a computer either gives you a headache or itchy red eyes (if you're allergic to dust) but the electric signal travelling through these chips cannot be seen.

In order to make it simple for humans, the parts of the computer made with these chips are characterized by giving them a name and its own symbol. These parts are connected into something else that also gets a name and another symbol. It keeps going until its done and the name given to the final product is "computer" and the symbol somewhat looks like this --> 💻.

Today’s computers use billions of tiny transistors to perform calculations by forming basic logic components called gates (not the founder of Microsoft) and it symbols are represented below.

The basis for computer logic was formed by George Boole a long time ago (1851-1864), which helps computers form an opinion (true / false) on the inputs presented to it. A logic gate might sound complex, but it is a simple electric circuit with two inputs and an output. It receives two incoming electric currents, compares them, and decides to generate a new outgoing electric current depending on the truth it finds. The most common gates called AND, OR, NOT, XOR (Exclusive Or), NAND (NOT AND), and NOR (NOT OR). A logic gate is like an admission office to a school that enforces these simple rules:

 Student admitted if excellent grades in Math and Science

 Student admitted if excellent grades in Math or Science or both

 Student admitted if excellent grades in Math or Science but not both

Student neither good in Math or Science but excellent in sports

Gates are the only thing that is required to build a computer, but a lot of them have been wired together to make something purposeful. One or more NAND gates is what makes a computer do what it could. Typically, standard logic gates are available in 14 pin or 16 pin DIL (dual in line) chips.

The TTL 7400 chip, containing four NANDs. The two additional pins supply power (+5 V) and connect the ground


By Audrius Meskauskas - Used GFDL images from 

Most complex math operations such as addition, subtraction, repeated addition (a.k.a multiplication), and repeated subtraction (a.k.a division) can be achieved by creatively assembling these gates in a circuit, where one output can be connected to input of one or many gates.

Now that the most complicated part of this simple machine's design has been covered, we'll be exploring its memorization skills in the sequel.

Categories

Blog

When Machines Learn to Prime: Rethinking Autonomous Security Operations

Why the Barrier to 24/7 Security Operations No Longer Exists

Machine stories