Legacy SIEM Can’t Keep Pace With AI-Driven Threats

Wei Li, security operations modernization lead, Americas, Accenture, and Spencer Lichtenstein, product lead, security operations, Google Cloud

Artificial intelligence-driven cyberattacks now materialize in seconds, and legacy SIEM platforms can’t correlate data fast enough to stop them. The status quo of legacy security is now a greater business risk than migration itself, said Wei Li, security operations modernization lead for Americas at Accenture, and Spencer Lichtenstein, product lead for security operations at Google Cloud.

The real power of AI in security operations isn’t just speed – it’s depth of analysis, Li said.

“You can’t do that with a legacy system, because you can’t correlate the information. You can’t do it at speed, and you can’t do it at scale,” Li said.

Lichtenstein pointed to Google’s vertical stack integration as the engine behind that capability. “We are deeply partnered with DeepMind at the point of early model development, so that they understand our problems.”

In this video interview with ISMG at Google Cloud Next 2026, Li and Lichtenstein also discussed:

How Accenture’s AI migration factory cuts implementation times by more than 50%;
Why agentic AI acts as a 30% force multiplier for human SOC analysts;
The North Star for autonomous security operations: transitioning analysts from operators to supervisors.

Li drives security operations modernization using AI and automation to improve visibility and reduce risk. He has more than 20 years of experience across Accenture, EY and PwC, specializing in cloud security, SIEM and cybersecurity transformation.

Lichtenstein leads AI-driven SecOps initiatives, improving analyst workflows and data use. He has more than 15 years of experience across Google Cloud, Cisco and RSA, specializing in threat hunting and security operations innovation.