CSIS

Definition

What is Security Information and Event Management (SIEM)

Security Information and Event Management (SIEM) is a solution that provides real-time monitoring and analysis of security alerts created by applications and network hardware. It allows organizations to get a holistic overview of their information security posture and consequently apply comprehensive protection for their infrastructure.

SIEM works in combination with two technologies, such as Security Information Management (SIM), which collects data extracted from the log files for further analysis and report of the security threats and vulnerabilities; and Security Event Management, which provides real-time system monitoring.