{"id":236,"date":"2017-02-10T10:53:30","date_gmt":"2017-02-10T14:53:30","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=236"},"modified":"2019-06-24T12:53:07","modified_gmt":"2019-06-24T16:53:07","slug":"five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/","title":{"rendered":"Buyer Beware: 5 Questions For Your Potential SIEM and Security Analytics Vendors"},"content":{"rendered":"

\"Five<\/a>The following is an excerpt from Solutions Review\u2019s 2017 SIEM Solutions Buyer\u2019s Guide, to view the full report, which includes a market overview of the top 24 SIEM and Security Analytics solutions, download it for free here<\/a>.<\/em><\/p>\n

In 2017, SIEM and security analytics are seen as necessary parts of any significant enterprise security effort, but choosing the right SIEM solution for your organization isn\u2019t easy. SIEM has a reputation as a complex and convoluted product, and implementation is a daunting process that can take weeks or even months to complete. Rush that process and you could end up with massive cost overruns or worse, an expensive, failed deployment.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

To complicate things further, SIEM is a mature market full of vendors capable of meeting the basic log management, compliance, and event monitoring requirements of a typical customer, but whose points of differentiation may not be obvious to the untrained eye. However, as similar as they may seem, many SIEM solutions are optimized for \u00a0 drastically different use-cases, and one size almost never fits all.<\/p>\n

To help you evaluate prospective SIEM solutions, here are five questions you should ask prospective vendors before choosing a solution. If you find these questions helpful, check out Solutions Review\u2019s free 2016 SIEM Buyer\u2019s Guide<\/a>, which features five more questions to ask yourself, and profiles of the top 24 solutions in the SIEM and Security Analytics solutions.<\/p>\n\n\n\n\n\n\n\n
\n

How will your product meet our auditing and regulatory compliance needs?<\/strong><\/p>\n

Compliance management is one of the most frequent use cases for SIEM solutions, and as such, most SIEMs have built-in support for the most common compliance efforts, such as HIPAA, PCI DSS, and SOX. Your organization can save time and resources by using a SIEM to meet its compliance reporting requirements, but before you can do so you need to make sure that a potential solution is compatible to your specific industry regulations.<\/p>\n

Ask your potential vendor to demonstrate a clear relationship between your industry compliance needs and their policies and rule sets. What out-of-the-box compliance reports are available? What level of customization is available for reporting?<\/p>\n<\/td>\n<\/tr>\n

Do you offer assistance with deployment? What about training for personnel?<\/strong><\/p>\n

SIEM is a complex technology, and so naturally, SIEM deployment is a complex process. In fact, SIEM is notoriously difficult to deploy– In a 2014 Report, Gartner analyst Oliver Rochford estimated that somewhere between 20% and 30% of SIEM deployments among his client base fail. Once successfully deployed, a SIEM solution requires a dedicated team of skilled analysts and technicians to manage the software and ensure effective use. Ask prospective vendors what kind of support they will provide during the deployment process, and what, if any, training is available for your team.<\/td>\n<\/tr>\n

Do you support public and private cloud platforms and big data environments? If not, do you have plans to do so?<\/strong><\/p>\n

Whether you’re there yet or not, there’s a strong chance that Public Cloud Computing and Big Data Solutions will play a prominent role in the future of your organization’s IT environment. If you’re spending top dollar on an SIEM solution today, you’ll want to know that it will integrate with the systems you use tomorrow. Ask prospective vendors how their solutions support cloud and big data platforms that you currently use, or may use in the future.<\/td>\n<\/tr>\n

How well does your SIEM handle the log sources? Is there extensive native support, or will custom development work be required?<\/strong><\/p>\n

Your SIEM isn’t worth much if it can’t understand the log data from the important log-generating sources in your organization. Make sure your potential SIEM solution supports your organization’s security systems, such as firewalls, intrusion prevention systems, VPNs, email gateways, and antimalware products.<\/p>\n

Any prospective SIEM solutions should also support log files from the operating system (both type and version) that your organization uses.<\/td>\n<\/tr>\n

\n

What features does your product provide for data analysis?<\/strong><\/p>\n

Aside from the SIEM’s alerts and reporting, an SIEM used for incident detection and response should provide features that help your security analysts review and analyze log data.<\/p>\n

Even the smartest, best-configured SEIM is worse than the best analyst–a highly accurate SIEM can still misinterpret events, so make sure your team can vet the SIEM’s results. Strong search and data visualization capabilities can also help facilitate the investigation of incidents.<\/p>\n

 <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

The following is an excerpt from Solutions Review\u2019s 2017 SIEM Solutions Buyer\u2019s Guide, to view the full report, which includes a market overview of the top 24 SIEM and Security Analytics solutions, download it for free here. In 2017, SIEM and security analytics are seen as necessary parts of any significant enterprise security effort, but […]<\/p>\n","protected":false},"author":24,"featured_media":164,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[100,40,42,35,99],"acf":[],"yoast_head":"\nFive SIEM Questions You Need To Ask Potential Security Vendors<\/title>\n<meta name=\"description\" content=\"The following is an excerpt from the Solutions Review SIEM Buyer's Guide outlining the top SIEM questions to ask potential vendors.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Five SIEM Questions You Need To Ask Potential Security Vendors\" \/>\n<meta property=\"og:description\" content=\"The following is an excerpt from the Solutions Review SIEM Buyer's Guide outlining the top SIEM questions to ask potential vendors.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2017-02-10T14:53:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-06-24T16:53:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/09\/Five-Questions-You-Need-To-Ask-Yourself-When-Evaluating-SIEM-Solutions.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"270\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jeff Edwards\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Edwards\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/\",\"name\":\"Five SIEM Questions You Need To Ask Potential Security Vendors\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/09\/Five-Questions-You-Need-To-Ask-Yourself-When-Evaluating-SIEM-Solutions.jpg\",\"datePublished\":\"2017-02-10T14:53:30+00:00\",\"dateModified\":\"2019-06-24T16:53:07+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\"},\"description\":\"The following is an excerpt from the Solutions Review SIEM Buyer's Guide outlining the top SIEM questions to ask potential vendors.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/09\/Five-Questions-You-Need-To-Ask-Yourself-When-Evaluating-SIEM-Solutions.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/09\/Five-Questions-You-Need-To-Ask-Yourself-When-Evaluating-SIEM-Solutions.jpg\",\"width\":600,\"height\":270,\"caption\":\"Five Questions You Need To Ask Yourself When Evaluating SIEM Solutions\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Buyer Beware: 5 Questions For Your Potential SIEM and Security Analytics Vendors\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\",\"name\":\"Jeff Edwards\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g\",\"caption\":\"Jeff Edwards\"},\"description\":\"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.\",\"sameAs\":[\"https:\/\/solutionsreview.com\",\"https:\/\/x.com\/InfoSec_Review\"],\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/jedwards\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Five SIEM Questions You Need To Ask Potential Security Vendors","description":"The following is an excerpt from the Solutions Review SIEM Buyer's Guide outlining the top SIEM questions to ask potential vendors.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/","og_locale":"en_US","og_type":"article","og_title":"Five SIEM Questions You Need To Ask Potential Security Vendors","og_description":"The following is an excerpt from the Solutions Review SIEM Buyer's Guide outlining the top SIEM questions to ask potential vendors.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2017-02-10T14:53:30+00:00","article_modified_time":"2019-06-24T16:53:07+00:00","og_image":[{"width":600,"height":270,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/09\/Five-Questions-You-Need-To-Ask-Yourself-When-Evaluating-SIEM-Solutions.jpg","type":"image\/jpeg"}],"author":"Jeff Edwards","twitter_misc":{"Written by":"Jeff Edwards","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/","name":"Five SIEM Questions You Need To Ask Potential Security Vendors","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/09\/Five-Questions-You-Need-To-Ask-Yourself-When-Evaluating-SIEM-Solutions.jpg","datePublished":"2017-02-10T14:53:30+00:00","dateModified":"2019-06-24T16:53:07+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6"},"description":"The following is an excerpt from the Solutions Review SIEM Buyer's Guide outlining the top SIEM questions to ask potential vendors.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/09\/Five-Questions-You-Need-To-Ask-Yourself-When-Evaluating-SIEM-Solutions.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2015\/09\/Five-Questions-You-Need-To-Ask-Yourself-When-Evaluating-SIEM-Solutions.jpg","width":600,"height":270,"caption":"Five Questions You Need To Ask Yourself When Evaluating SIEM Solutions"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/five-questions-you-need-to-ask-potential-siem-and-security-analytics-vendors\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Buyer Beware: 5 Questions For Your Potential SIEM and Security Analytics Vendors"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6","name":"Jeff Edwards","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=mm&r=g","caption":"Jeff Edwards"},"description":"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.","sameAs":["https:\/\/solutionsreview.com","https:\/\/x.com\/InfoSec_Review"],"url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/jedwards\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/236"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=236"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/236\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/164"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}