{"id":1484,"date":"2018-05-01T14:53:43","date_gmt":"2018-05-01T18:53:43","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=1484"},"modified":"2018-12-06T16:01:35","modified_gmt":"2018-12-06T20:01:35","slug":"reflection-2017-gartner-magic-quadrant-siem-solutions","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/","title":{"rendered":"Reflection on the 2017 Gartner Magic Quadrant for SIEM Solutions"},"content":{"rendered":"

\"SIEM<\/p>\n

More than an entire fiscal quarter has passed since technology research firm Gartner released their 2017 iteration of the annual <\/span>Gartner Magic Quadrant for SIEM<\/span><\/a>. It\u2019s one of, if not the, most prominent and highly anticipated reports on the SIEM marketplace in the cybersecurity community. Professionals wait with bated breath for it every year, even if it is not quite a perfect assessment.<\/span><\/p>\n
Widget not in any sidebars
\n

However, at the speed of digital business\u2014and cybersecurity in particular\u2014an entire fiscal quarter represents a significant amount of time. With the benefit of hindsight, what has changed in the SIEM marketplace since the 2017 Gartner Magic Quadrant? Have things changed significantly? How are Gartner\u2019s assessments holding up to reality? <\/span><\/p>\n

We looked back at our initial analysis of the Gartner Magic Quadrant for SIEM<\/a>\u00a0(link to the 2018 iteration). Here\u2019s what we found: <\/span><\/p>\n

Breach Detection Continues to Challenge Enterprises<\/b><\/h3>\n

SIEM empowers enterprises in myriad ways\u2014via compliance reporting, data aggregation and correlation, and user and entity behavior analytics (UEBA, which we\u2019ll come to in more detail in a moment). All of these capabilities in turn feed into what is arguably SIEM\u2019s greatest benefit for enterprises: threat detection and monitoring. Therefore it is no surprise that in their Magic Quadrant assessment of the SIEM marketplace, Gartner examined the context surrounding this capability more than any other. <\/span><\/p>\n

At the time of publication, the 2017 Gartner Magic Quadrant reported that more than 80% of data breaches went undetected by enterprises. The question\u00a0isn\u2019t whether threat detection continues to be a challenge for enterprises\u2014many of the more prominent data breaches announced over the past quarter had an average dwell time of several months. Rather, the question is whether the situation has improved at all since publication. <\/span><\/p>\n

There is some evidence to suggest that it has. A recent survey by <\/span>Accenture<\/span> found that while in 2017 only 32% of enterprises detected a breach within the first month of the attack, that percentage has increased to 89% in 2018. What\u2019s more, in 2018 55% of enterprises claimed that their IT security teams could detect a threat within a week of infiltration, whereas in 2017 only 10% could make the same claim. <\/span><\/p>\n

Yet Accenture\u2019s research raises questions: according to the survey, only 66% of enterprises have an active cybersecurity program protecting their IT environment. If that is true, it would mean that a good percentage of enterprises are still conducting their threat detection and management manually rather than through the algorithmic tools of a dedicated SIEM solution.\u00a0<\/span>The researchers behind the Gartner Magic Quadrant for SIEM point out that enterprises would have a much easier time detecting malicious programs and users by deploying the threat intelligence, behavior profiling, and analytics tools that make SIEM viable. It remains to be seen how many enterprises take them up on this advice in 2018. \u00a0\u00a0<\/span><\/p>\n

Compliance Continues to Take a Backseat?<\/b><\/h3>\n

While SIEM<\/a> can be a critical component in ensuring that your\u00a0enterprise fulfills their regulatory and industry compliance mandates, the Gartner Magic Quadrant contends that compliance is a secondary concern in purchasing decisions. Threat detection and management are supposedly much higher concerns. <\/span><\/p>\n

Our own research can\u2019t verify Gartner\u2019s assertion either way. We have not yet discovered a survey that definitely places compliance as a secondary concern for enterprises in their SIEM selection process. At the same time, we haven\u2019t seen compliance as a major topic in surveys or research concerning SIEM\u2014they tend to focus on best practices instead.<\/span><\/p>\n

Any good detective will tell you that sometimes the absence of evidence can be just as telling as blatant evidence, and while that is true here what it tells us can be difficult to discern. Is compliance not inquired into because the compliance tools in SIEM solutions are mature and not an innovation priority? Because it is part of the bundle that is SIEM in the first place? And if so, does that actively prove the Gartner Magic Quadrant claim? <\/span><\/p>\n

These aren\u2019t necessarily straightforward questions, and the answers to them are as much psychological as they are technical.<\/span><\/p>\n

UEBA and As-A-Service Continue to Attract Interest<\/b><\/h3>\n

The Gartner Magic Quadrant for SIEM noted that many new SIEM solutions are arising from former\u00a0UEBA vendors, so that it can be hard to tell whether SIEM is the natural evolution of UEBA technology or the other way around. SIEM can perform functions that UEBA cannot, but UEBA is an essential component of SIEM solutions by providing insight into user activities. The Gartner Magic Quadrant blurs the lines between the two, and that may reflect how the SIEM market is changing even as it matures.\u00a0\u00a0<\/span><\/p>\n

This reflection is not meant as a critique of Gartner\u2019s Magic Quadrant for SIEM in any way. We greatly respect their research and insight. This reflection is merely meant as a companion piece to help enterprises evaluate their selection process for one of the most difficult and important digital decisions you will make.<\/span><\/p>\n

You can read the 2018 SIEM Magic Quadrant by Gartner<\/a> here.<\/p>\n


Widget not in any sidebars
\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

More than an entire fiscal quarter has passed since technology research firm Gartner released their 2017 iteration of the annual Gartner Magic Quadrant for SIEM. It\u2019s one of, if not the, most prominent and highly anticipated reports on the SIEM marketplace in the cybersecurity community. Professionals wait with bated breath for it every year, even […]<\/p>\n","protected":false},"author":41,"featured_media":1125,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551],"tags":[95,145,13,663,112,86,21,22],"acf":[],"yoast_head":"\nReflection on the 2017 Gartner Magic Quadrant for SIEM Solutions<\/title>\n<meta name=\"description\" content=\"With the benefit of hindsight, what has changed in the SIEM marketplace since the Gartner Magic Quadrant for SIEM Solutions?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Reflection on the 2017 Gartner Magic Quadrant for SIEM Solutions\" \/>\n<meta property=\"og:description\" content=\"With the benefit of hindsight, what has changed in the SIEM marketplace since the Gartner Magic Quadrant for SIEM Solutions?\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2018-05-01T18:53:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-12-06T20:01:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/12\/Siem.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/\",\"name\":\"Reflection on the 2017 Gartner Magic Quadrant for SIEM Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/12\/Siem.jpg\",\"datePublished\":\"2018-05-01T18:53:43+00:00\",\"dateModified\":\"2018-12-06T20:01:35+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"With the benefit of hindsight, what has changed in the SIEM marketplace since the Gartner Magic Quadrant for SIEM Solutions?\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/12\/Siem.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/12\/Siem.jpg\",\"width\":800,\"height\":400,\"caption\":\"Gartner SIEM Magic Quadrant\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Reflection on the 2017 Gartner Magic Quadrant for SIEM Solutions\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Reflection on the 2017 Gartner Magic Quadrant for SIEM Solutions","description":"With the benefit of hindsight, what has changed in the SIEM marketplace since the Gartner Magic Quadrant for SIEM Solutions?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/","og_locale":"en_US","og_type":"article","og_title":"Reflection on the 2017 Gartner Magic Quadrant for SIEM Solutions","og_description":"With the benefit of hindsight, what has changed in the SIEM marketplace since the Gartner Magic Quadrant for SIEM Solutions?","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2018-05-01T18:53:43+00:00","article_modified_time":"2018-12-06T20:01:35+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/12\/Siem.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/","name":"Reflection on the 2017 Gartner Magic Quadrant for SIEM Solutions","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/12\/Siem.jpg","datePublished":"2018-05-01T18:53:43+00:00","dateModified":"2018-12-06T20:01:35+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"With the benefit of hindsight, what has changed in the SIEM marketplace since the Gartner Magic Quadrant for SIEM Solutions?","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/12\/Siem.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2017\/12\/Siem.jpg","width":800,"height":400,"caption":"Gartner SIEM Magic Quadrant"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/reflection-2017-gartner-magic-quadrant-siem-solutions\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Reflection on the 2017 Gartner Magic Quadrant for SIEM Solutions"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1484"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=1484"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/1484\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/1125"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=1484"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=1484"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=1484"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}