Merlin is adding Torq to its federal security operations architecture, with plans to connect AI-assisted investigation to existing agency security tools.
The companies announced the arrangement Sept. 8. Torq’s platform is intended to help collect and prioritize alerts, investigate incidents and carry out responses within boundaries established by the agency.
Merlin describes its architecture as using human authorization to govern automated actions. It is also supporting Torq’s pursuit of FedRAMP authorization through Constellation GovCloud. The announcement does not say that Torq has completed that process.
For an agency, the central implementation question is how much authority to give an automated response. Gathering evidence and interrupting a public service have different consequences, even when both actions originate from the same alert.
In a hypothetical security operations center, an AI workflow could assemble the login history, device information and recent activity associated with a suspicious account. It could then prepare a recommendation for an analyst to review.
Disabling the account would require a separate decision in that example, particularly if it supported a service used by several departments. The analyst would need to understand the evidence, the likely operational effect and the route to restore access if the conclusion proved wrong.
A practical evaluation could measure how much review time the assembled evidence saves. It could also count incorrect recommendations and test whether staff can reconstruct every automated step afterward.
Those measures would give an agency a basis for deciding whether to expand the workflow’s authority. A high volume of closed alerts would be less informative if important cases were closed incorrectly or employees had to repeat the investigation.
The Merlin-Torq arrangement provides a proposed route for that work. Its federal adoption will depend on the authorization process, integration with agency systems and demonstrated performance under the agency’s own operating rules.