\cleardoublepage \part{People and Career} \setbookpart{People and Career}

Part V: People and Career

The blue team is people who work nights, carry pagers and read the worst day of other people's year. This part asks what AI does to their work, how they are monitored and measured, what competence now means, how analysts are made when the entry rung shrinks, and whether there will be a SOC in 2036.

Chapters in this part:

• Chapter 21, The Analyst at Work: Fatigue, On-Call and Being Managed by Metrics, treats the analyst's experience and stages a debate.
• Chapter 22, Competences, Training and Exercises: A Framework for the Transformed Blue Team, treats competence evidenced by demonstration.
• Chapter 23, Keeping the Craft and Making New Analysts: The Apprenticeship Problem, treats skill and the junior route, and stages a debate.
• Chapter 24, The Future of the Blue Team: Will There Be a SOC in 2036?, looks ahead with labelled outlooks and the author's projection.

Blue team functions in this part. The part concerns all five functions, with B3 Investigate and B5 Learn most of all.

The thread from the series. AI Boss described algorithmic management and the manager's transformed role; AI Threat described the ironies of automation; The Transformed Security Architect described keeping the craft. This part applies them to the people of the blue team.

What you will learn in this part:

• What studies measured about fatigue, load and monitoring in security operations
• How competence is evidenced by exercises
• How a team makes analysts when AI does the junior work
• What can be said about the future, and with what label

Part VI turns to experience and conclusions.