IT Operations Automation · Security and Compliance
DXC's security operations center was facing rapidly growing cyber complexity, including zero-day vulnerabilities, identity-based attacks, supply chain breaches, and AI-enabled adversary tactics, while analyst shortages and repetitive triage work were straining teams and slowing response.
Reported impact
DXC reports materially faster SOC response and investigation workflows, full elimination of reliance on Tier 1 analysts for repetitive triage tasks, and the ability to redeploy staff into higher-value work such as threat intelligence analysis and threat hunting.
DXC describes an internally built AI-driven transformation of its security operations center in which AI agents were developed and deployed across the SOC to automate repetitive front-line security work. The implementation focused on ticket triage, investigation support, and broader agentic protection workflows rather than a broad platform replacement. DXC says it introduced the agents through a controlled MVP approach, validating the model on smaller deployments, gathering feedback, then scaling across operations. In practice, the agents handle tedious triage work continuously, while human analysts provide judgment, oversight, and guardrail management for agent actions. The operating model integrates AI into existing SOC processes and talent workflows so analysts can move from Tier 1 repetitive work toward threat intelligence and threat hunting. The source does not name specific storage, model, or cloud components, so the described architecture is best understood as an in-house AI agent layer embedded into DXC's SOC workflow and analyst operating processes.
"Agents handle tedious triage work 24/7 while our people direct their energy and expertise to the highest-impact areas of the business."
"By automating highly repetitive, mundane tasks within our SOC— such as ticket triage — we’ve reduced reliance on Tier 1 SOC analysts by 100%."
"Eventually, our teams experienced firsthand the disruptive impact of agentic protection, which includes a 68% reduction in time to acknowledge a ticket and a 77% reduction in triage and investigation time."
"We launched minimum viable products to validate our approach, gathered feedback, then rapidly scaled."
"We took this approach last fall when we developed and deployed AI agents across our SOC."
Review how this reference was scored and trace each normalized claim back to its documented source.
Scoring methodology
Customer Reference Value measures usefulness as a customer reference. Evidence Confidence measures the quality and traceability of available evidence, not independent verification.
Traceability
Field coverage shows which facts each source supports. Dates are shown only when documented by the source.
Related
Google Cloud Sample Archived · Oct 2, 2026 PT Astra Graphia IT AGIT needed to scale a managed security operations center that could meet Indonesian data-residency requirements, reduce noisy alert handling, and standardize detection engineering for enterprise customers. AGIT scales its enterprise Managed SOC in Indonesia using Google SecOps, Gemini, and Mandiant to drive 15%… Cloud Run · Compute Engine · Gemini 
ServiceNow Sample Modified · Sep 29, 2026 Accenture Accenture needed enterprise-wide AI governance and consistent support workflows for roughly 800,000 employees and 1,900 business services as AI usage expanded across the company. 1,900 Business services managed on ServiceNow AI Control Tower · ServiceNow AI Platform · ServiceNow Otto 
IBM Sample Sep 11, 2025 Lenovo PCCW Solutions (LPS) LPS needed a more unified way to monitor, secure, and scale hybrid environments for enterprise clients because its existing monitoring tools only offered siloed snapshots and could not support proactive incident… 24×7 service-level commitments IBM Instana · IBM LinuxONE · IBM Turbonomic 
