Importance of SIEM in Organization

Importance of SIEM in Organization

Amol Bhalerao

Keraleeya Samajam (Regd.) Dombivli’s Model College, Thakurli (East), Maharashtra, India

Abstract—In this paper we explore the modern-day scenario of Security Information and Event Management (SIEM) and how it has evolved into a more sophisticated technology. SIEM is a combination of two different technologies, Security Information Management and Security Event Management, that not only identifies potential and actual threats but also manages and presents remedial solutions. Due to its remarkable efficiency, SIEM has replaced the Intrusion Detection and Prevention System in the wake of advanced security invasions. The paper presents the workings of SIEM, its relation to log management, and the implications of deploying it in a modern enterprise. Lastly, the paper discusses the essential criteria that should be considered when selecting a suitable SIEM.

Keywords— Log Management, Security Information, Event Management.