Managed Security
What is Security Information and Event Management?
Also known as: SIEM
Security information and event management is technology that aggregates, normalizes, and correlates log and event data from across an environment to support monitoring, alerting, and investigation. It matters because it gives security teams a central place to detect patterns and meet compliance logging requirements.
Example
A SIEM rule correlates repeated failed logins across systems followed by a success, raising an alert for a possible brute-force account takeover.
Reference: NIST ↗
Related Clear Infosec services
Related terms
Have a question about security information and event management in your environment? Talk to our team.