# Singapore's infocomm regulator assessed two security-analyst roles as high-impact, expecting SOAR tooling to replace their core tasks within three to five years

Page: https://flyvolo.ai/en/changes/ev-20221001-cybersecurity-analyst-2
Date: 2022-10-01 · Stage: Forecast
Can this record move a task judgement? no
Occupation: https://flyvolo.ai/en/careers/cybersecurity-analyst

## Scope

A commissioned sector study, not a measurement of anything that happened, which is why it sits in a stage that changes nothing. Read the mechanism carefully, because it is not the one most readers will assume: the tool named is SOAR — security orchestration, automation and response — which is workflow automation, not a language model. The report is dated October 2022 and its underlying analysis is dated December 2020, so it was written before generative AI reached the public; 'AI and analytics' appears in it as a trend heading covering machine learning for alert prioritisation, not chat models. What it claims specifically is that SOAR will take over manual cyber monitoring and reporting and potentially replace core tasks such as managing cyber security systems and operations, thereby reducing the manpower required for those tasks, while job holders keep the analysis of log data and reports. It covers Singapore's infocomm workforce only, it aggregates stakeholder interviews rather than measuring employment, and the report itself says its findings were taken at a point in time and must be re-contextualised by whoever reads them later.

## Source

- IMDA / Workforce Singapore — Impact Study on the Information & Communications Workforce in Singapore (full report, PDF) — https://www.swda.gov.sg/api/assets/d65e963c-df80-4768-b5b4-4bb214307a22/imda-impact-study-master-full-vf6.pdf (primary source)

## What this means

Four years ago, the agency that regulates this sector in Singapore and runs its retraining programmes put two security-analyst titles on a list of roles it expected to face displacement, and named the tool: SOAR. The window it gave itself is closing now, and it was specific enough to be checked — it named the roles, the tool, and the tasks it expected that tool to take over.

## What it does not show yet

Nothing here counts anyone. It is an expectation from stakeholder interviews, not employment data, and it changes no judgement on this page. Two things limit it further. The mechanism named is workflow automation, not a language model — the report predates generative AI reaching the public, so it is not evidence about the thing most readers came here asking about. And it describes Singapore's infocomm workforce; a security operations centre elsewhere may be organised entirely differently.

## How to verify it yourself

This forecast is old enough to test yourself, which is rare. Look at your own security operations centre and check whether workflow automation of the SOAR kind now does the manual monitoring and reporting the report expected it to take over, and whether analysing log data and reports still sits with people. If the tasks a study named four years ago are still done by hand where you work, that is worth knowing before you plan around its forecast.


More: https://flyvolo.ai/llms.txt