concept#Security#Observability#Analytics#Integration

Security Information and Event Management (SIEM)

A conceptual framework for centralized collection, correlation and analysis of security logs and events to detect and respond to incidents.

Security Information and Event Management (SIEM) is a conceptual framework for collecting, correlating, and analyzing security logs and events.

Maturity

Established

Cognitive loadHigh

360° overview

Six perspectives place the building block in context. The numbers show where each perspective continues in the reading path.

The building block at a glance

Security Information and Event Management (SIEM)

360°

2

2

Integrations

Cloud provider logging (AWS CloudWatch, Azure Monitor)

+2

1

Centralize collection of relevant telemetry with reliable timestamps

Value stream stage: Run

4

3

4