Find Your Route from SIEM to SIP and SOAR

Security Information and Event Management (SIEM) platforms have been a key part of many enterprises’ cybersecurity infrastructures for over a decade. However, facing the growing number and sophistication of cyber threats, even the largest security operations centers built around them fail to respond to attacks in time. Are SIEMs a thing of the past already? This Leadership Brief provides some insights and recommendations.

By Alexei Balaganski
ab@kuppingercole.com

March 5, 2020

Content of Figures

Figure 1 SIEM evolution timeline

1 Executive Summary

For years, SIEM solutions have dominated the enterprise security market, and even nowadays they are still widely used to power security operations cen ...

2 Analysis

Traditional SIEM platforms, which have long been the core of security operations centers, have gone a long way to become really good at aggregating se ...

From that moment, the security analytics market has rapidly expanded, offering a wide range of real-time security intelligence products. Such tools pr ...

3 Recommendations

The market of security intelligence and automation solutions is still far from reaching the plateau of maturity and the products offered by various ve ...

4 Related Research

Advisory Note: KRIs and KPI for Cyber Security – 80239
Advisory Note: Maturity Level Matrix for Cyber Security – 72555
Advisory Note: Real-Time Security Intelligence – 71033
Leadership Brief: Responding to Cyber Incidents – 80209
Blog: Artificial Intelligence in Cybersecurity: Are We There Yet?
Webcast: Get the SIEM You’ve Always Wanted: Intelligent, Automated, with Unlimited Capacity