mobile image

Optimizing security operations centre (SOC) activities with AI integration

Repsol identified the need to strengthen its cybersecurity posture across a complex enterprise environment. It faced challenges managing SOC activities, migrating security, information and event management (SIEM) platforms and processing large volumes of threat intelligence from multiple sources. Manual processes limited the speed and scalability needed to address evolving threats. Solution Repsol positioned AI as a strategic pillar, deploying an enterprise-grade agentic AI platform and expanding the use of large language models (LLMs). Within cybersecurity, AI was integrated into SOC operations and governance. Key initiatives included: – Accelerating SIEM migration using AI-driven agents, enabling faster transitions – Enhancing threat intelligence by using predesigned and optimized AI prompts, automating the selection, extraction and refinement of data on vulnerabilities and threat actors from multiple sources

Impact / Outcome
SIEM migration was accelerated, reducing the lead time for detection rule creation and migration by 15%. Threat intelligence became more automated and actionable, improving 11% of related operational activities. These advances strengthened Repsol’s defensive posture, improved efficiency and supported a more proactive approach to cybersecurity.
Key Metrics
reducing the lead time for detection rule creation and migration by 15%. Threat intelligence became more automated and actionable, improving 11% of related operational activities
Locations
Europe, Spain
Sector
Energy
Year published
04 May 2026
Organization involved
Avatar Image
Repsol