Vendor Landscape: Security Information & Event Management

More documents

Recommendations

Info

SIEM may make life harder before it makes it easier; if you can’t handle the bump, don’t invest in SIEM Improving organizational security stance is not an overnight process; SIEM will help but things will get worse before they get better. 1. When first deployed, a SIEM solution will expose the enterprise to all the risk it was missing but that was there anyway. In today’s regulated world, if you’re not prepared to address that increased risk, you’d best just stay unaware. 3. As the most serious threats are addressed, risk tapers off fairly quickly. At this point perceived risk and actual risk are being reduced, though levels are likely to be higher than what was perceived for some time. 2. As visibility into risk increases, security spending will, by necessity, increase as new tools and/or time need to be expended to combat identified risks. Most enterprises don’t have unlimited security budgets, so spending initially trails behind threat exposure. 1 2 3 5. In time, and with concentrated effort, SIEM can enable the enterprise to drive risk and spending to lower levels than were previously experienced. As a side benefit, while risk is being addressed, SIEM is also providing compliance reporting benefits that help in other ways. 4 5 4. Spending remains higher for longer as solution deployments must be rationalized and staffing levels finalized. Spending begins to go down when the costs associated with breaches and other threats are eliminated. Info-Tech Research Group 12
Evaluate SIEM Vendors What’s in this Section: • Info-Tech’s Vendor Landscape for ten SIEM vendors • Shortlisting SIEM vendors through scenario analysis • Developing and executing a SIEM RFP Sections: Understand SIEM Trends and Considerations Evaluate SIEM Vendors Develop Your SIEM Implementation Strategy Appendices Info-Tech Research Group 13
Page 1 and 2: Vendor Landscape: Security Informat
Page 3 and 4: Executive Summary Understand SIEM T
Page 5 and 6: Understand SIEM Trends and Consider
Page 7 and 8: Like every tool, SIEM has limitatio
Page 9 and 10: Determine how and where SIEM will h
Page 11: Be clear about the impact of SIEM-e
Page 15 and 16: SIEM Vendor selection / knock-out c
Page 17 and 18: The Info-Tech SIEM Vendor Landscape
Page 19 and 20: The Info-Tech SIEM Value Index What
Page 21 and 22: Advanced Features are the capabilit
Page 23 and 24: LogRhythm’s comprehensive SIEM fe
Page 25 and 26: Sensage is a small company that eas
Page 27 and 28: Q1 Labs QRadar: a quality product l
Page 29 and 30: LogLogic provides a strong solution
Page 31 and 32: NitroSecurity continues to bring a
Page 33 and 34: SolarWinds is a newer face in the m
Page 35 and 36: RSA has a solid solution, but also
Page 37 and 38: Symantec offers vendor stability an
Page 39 and 40: ArcSight offers both enterprise- an
Page 41 and 42: Trustwave’s strength is in their
Page 43 and 44: Streamline monitoring, alerting, an
Page 45 and 46: Ensure the reduction of enterprise
Page 47 and 48: Issue an RFP to ensure SIEM vendors
Page 49 and 50: Take charge of vendor demonstration
Page 51 and 52: Getting to a SIEM implementation st
Page 53 and 54: Identify constraints for your SIEM
Page 55 and 56: Account for implementation resource
Page 57 and 58: Determine how you intend to staff S
Page 59 and 60: Start modestly, but keep the final
Page 61 and 62: Vendor Landscape Methodology: Overv
Page 63 and 64:
Vendor Landscape Methodology: Scori
Page 65 and 66:
Vendor Landscape Methodology: Infor
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Vendor Landscape Methodology: Fact
Page 73 and 74:
Product Pricing Scenario, continued
Page 75 and 76:
Country Info-Tech Research Group 75
Page 77 and 78:
FTEs Info-Tech Research Group 77
show all

Vendor Landscape: Security Information & Event Management

Create successful ePaper yourself

Delete template?

Save as template?