As SIEM technology becomes outdated and less effective will cloud-delivered security analytics platforms be the key?
Sort by:
That's not a fantastically worded question.
How many SIEM products have not been updated to include AI/ML/ Cloud scale analytics now? There are not many 'legacy' SIEM products available on the market today. Most SIEM's now have native SOAR capabilities too, increasing their efficacy in both detection and remediation metrics.
There will always be a place for on premise SIEM products - OI/IOT environments, or for those organisations for which data privacy or compliance is paramount, so Cloud is not always the answer or best answer for many customers.
Yes thats right.
While cloud-based security analytics platforms can provide many benefits, it's important for organizations to carefully consider the privacy and security implications of storing their data/logs in the cloud.
Putting security into the hands of a 3rd party who have no skin in the game is a bad idea. There are many 3rd party security teams who can help without handing over the entire cookie jar.