Published: 05 November 2018
Summary
Managing and using a SIEM is difficult, and many projects are stuck in compliance or minimal value deployments. Most SIEM challenges come from the operations side, not broken tools. This guidance supports technical professionals focused on security working to operate, tune and utilize SIEM tools.
Included in Full Research
- Prework
- Operate
- Run/Adapt/Watch Model for SIEM Operations
- Watch
- Adapt
- The SIEM Operations Team
- SIEM Personnel Questions
- SIEM Team Interactions
- Training the SIEM Team
- Follow Up
- Recover From SIEM Failure
- Improve SIEM Maturity
- Climbing the Maturity Ladder
- Evolving From SIEM to Big Data
- Related Guidance