Vendor Landscape: Security Information & Event Management

More documents

Recommendations

Info

LogLogic leads a strong group of SIEM offerings Info-Tech evaluated ten competitors in the SIEM market, including the following notable performers: Champions: • LogRhythm delivers a strong SIEM product with built-in file integrity monitoring and host intrusion detection capabilities. • Sensage offers big data management capabilities to a growing list of impressive clients with stringent security requirements. • Q1Labs, through its acquisition by IBM, has joined its quality SIEM solution with a vendor that can raise its profile substantially. Value Award: • SolarWinds provides a solid feature set at a price point that can’t be beaten, targeted at the small/medium enterprise (SME) market. Trend Setter Award: • NitroSecurity, with its unparalleled set of advanced features, is an appealing solution on its own. With NitroSecurity’s recent acquisition by McAfee (Intel), the future looks bright. Info-Tech Insight 1. Focus on business requirements: Identify the functionality that your organization requires to meet business needs or to justify an investment in SIEM technology. 2. Consider future requirements: Keep in mind all potential benefits of a SIEM deployment, whether you are focused primarily on simplifying compliance, speeding event management and incident response, or reducing overall risk. But don’t underestimate the effort – and cost – of operating your SIEM. 3. Go for good enough for you: Align current and future requirements with the capabilities and solution feature-sets of vendors. While Champions stand out among the products reviewed, another solution that better complements other security tools in your arsenal may be a more appropriate choice. Info-Tech Research Group 4
Understand SIEM Trends and Considerations What’s in this Section: • What SIEM is – and what it isn’t • The role of SIEM in managing risk • Key deciding factors for SIEM • Assessing the appropriateness of SIEM Sections: Understand SIEM Trends and Considerations Evaluate SIEM Vendors Develop Your SIEM Implementation Strategy Appendices Info-Tech Research Group 5
Page 1 and 2: Vendor Landscape: Security Informat
Page 3: Executive Summary Understand SIEM T
Page 7 and 8: Like every tool, SIEM has limitatio
Page 9 and 10: Determine how and where SIEM will h
Page 11 and 12: Be clear about the impact of SIEM-e
Page 13 and 14: Evaluate SIEM Vendors What’s in t
Page 15 and 16: SIEM Vendor selection / knock-out c
Page 17 and 18: The Info-Tech SIEM Vendor Landscape
Page 19 and 20: The Info-Tech SIEM Value Index What
Page 21 and 22: Advanced Features are the capabilit
Page 23 and 24: LogRhythm’s comprehensive SIEM fe
Page 25 and 26: Sensage is a small company that eas
Page 27 and 28: Q1 Labs QRadar: a quality product l
Page 29 and 30: LogLogic provides a strong solution
Page 31 and 32: NitroSecurity continues to bring a
Page 33 and 34: SolarWinds is a newer face in the m
Page 35 and 36: RSA has a solid solution, but also
Page 37 and 38: Symantec offers vendor stability an
Page 39 and 40: ArcSight offers both enterprise- an
Page 41 and 42: Trustwave’s strength is in their
Page 43 and 44: Streamline monitoring, alerting, an
Page 45 and 46: Ensure the reduction of enterprise
Page 47 and 48: Issue an RFP to ensure SIEM vendors
Page 49 and 50: Take charge of vendor demonstration
Page 51 and 52: Getting to a SIEM implementation st
Page 53 and 54: Identify constraints for your SIEM
Page 55 and 56:
Account for implementation resource
Page 57 and 58:
Determine how you intend to staff S
Page 59 and 60:
Start modestly, but keep the final
Page 61 and 62:
Vendor Landscape Methodology: Overv
Page 63 and 64:
Vendor Landscape Methodology: Scori
Page 65 and 66:
Vendor Landscape Methodology: Infor
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Vendor Landscape Methodology: Fact
Page 73 and 74:
Product Pricing Scenario, continued
Page 75 and 76:
Country Info-Tech Research Group 75
Page 77 and 78:
FTEs Info-Tech Research Group 77
show all

Vendor Landscape: Security Information & Event Management

Create successful ePaper yourself

Delete template?

Save as template?