{"id":3053,"date":"2020-06-10T16:37:38","date_gmt":"2020-06-10T20:37:38","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3053"},"modified":"2020-06-16T15:07:28","modified_gmt":"2020-06-16T19:07:28","slug":"three-potential-challenges-in-siem-maintenance","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/","title":{"rendered":"Three Potential Challenges in SIEM Maintenance"},"content":{"rendered":"

\"Three<\/p>\n

What are the three potential challenges in SIEM maintenance facing enterprises today? How can your enterprise prepare for them, and what other obstacles might you face?\u00a0<\/span><\/p>\n

SIEM possesses a reputation as complicated and expensive compared to other branches of cybersecurity. While this reputation often becomes over-exaggerated, it remains rooted in fact. However, your enterprise can prepare for dealing with these challenges today as you begin the SIEM selection process<\/a>.\u00a0<\/span><\/p>\n

Here\u2019s what to watch for in SIEM maintenance and how to ready your cybersecurity accordingly.\u00a0<\/span><\/p>\n


Widget not in any sidebars
\u00a0\u00a0<\/span><\/p>\n

Three Potential Challenges In SIEM Maintenance\u00a0<\/b><\/h2>\n

1. Lack of Investment (Money and Resources)<\/b><\/h3>\n

According to a <\/span>Barracuda survey<\/span><\/a> released last month, 40 percent of companies cut their cybersecurity budgets to save costs during the coronavirus pandemic. Often, this means delaying the upgrading of core security systems, including SIEM. Unfortunately, this in turn causes SIEM to age without receiving necessary patches.<\/span><\/p>\n

Patches don\u2019t just speed up processes. In a SIEM maintenance context, going without patches means solutions can\u2019t optimally ingest or process security data. Additionally, it creates new challenges for processing and maintaining visibility over hybrid and cloud architectures.<\/span><\/p>\n

At the same time, enterprises sometimes fail to create a cybersecurity team that works to ensure optimal SIEM maintenance and performance. These teams are vital in handling alerts, implementing upgrades, or conducting threat hunting. Without the investment of human resources, you may struggle with maintaining configurations and conducting reviews.\u00a0\u00a0<\/span><\/p>\n

Part of SIEM maintenance involves allocating the proper resources to SIEM, both in terms of budget and in terms of manpower. Cybersecurity is not a side cost with no value; instead, you need to consider it as you would any other essential work process. Also, you need a fully-fledged cybersecurity team that can deploy patches and follow up alerts with investigations.\u00a0<\/span><\/p>\n

If your enterprise struggles with either, consider outsourcing your cybersecurity with a managed security services provider.<\/span><\/p>\n

2. Weak Incident Response<\/b><\/h3>\n

As illustrated above, SIEM solutions don\u2019t operate in a vacuum. Instead, they operate within the context of a human cybersecurity culture. Therefore, a necessary component of SIEM maintenance involves preparing for the worst in terms of data breaches and cyber-attacks.\u00a0<\/span><\/p>\n

This involves having an adequate, practiced incident response plan for your business. Your employees and security team should know how to communicate during a security event, whom to communicate, and what actions they should take. Further, the channels of communication between security operatives and departments like legal and public relations should be clearly outlined.\u00a0<\/span><\/p>\n

Critically, the key to effective incident response is consistent practice and evaluation. An incident response plan kept in a binder on the shelf helps no one. You need to practice it the way you practice on-premises fire drills. Moreover, you need to make sure your incident response plan matches your business\u2019 needs and workforce. Any gaps or issues should be addressed before a cyber-attack occurs.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

3. False Positives<\/b><\/h3>\n

No problem with SIEM maintenance compares with that of false positives. A false positive refers to a security alert generated by an activity that on further inspection indicates a normal action or an unusual but not malicious action.<\/span><\/p>\n

By itself, it doesn\u2019t seem like a serious problem. However, each false positive requires an investigation, which eats up valuable time and resources. Multiply a false positive by hundreds or thousands, and legitimate alerts vanish under a sea of noise.\u00a0<\/span><\/p>\n

Therefore, you need to make sure that SIEM maintenance includes checking on the rules configurations of your solutions. Remember, SIEM follows your rules, and if your rules don\u2019t match your workflows or goals, you suffer the consequences. Additionally, you should ensure that your solution offers contextualization. This capability provides preliminary information your security team can use to eliminate false positives before investing time in investigations.\u00a0<\/span><\/p>\n

How to Learn More About SIEM Maintenance\u00a0<\/b><\/h3>\n

Download our SIEM Buyer\u2019s Guide<\/a> for more on the top vendors and capabilities.\u00a0<\/span><\/p>\n


Widget not in any sidebars
\u00a0\u00a0 \u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

What are the three potential challenges in SIEM maintenance facing enterprises today? How can your enterprise prepare for them, and what other obstacles might you face?\u00a0 SIEM possesses a reputation as complicated and expensive compared to other branches of cybersecurity. While this reputation often becomes over-exaggerated, it remains rooted in fact. However, your enterprise can […]<\/p>\n","protected":false},"author":41,"featured_media":2445,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551,1],"tags":[353,95,1188,112,1147,86,1330,21,57,22,1331],"acf":[],"yoast_head":"\nThree Potential Business Challenges in SIEM Maintenance<\/title>\n<meta name=\"description\" content=\"What are the three potential challenges in SIEM maintenance facing enterprises today? How can your enterprise prepare for them?\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Three Potential Business Challenges in SIEM Maintenance\" \/>\n<meta property=\"og:description\" content=\"What are the three potential challenges in SIEM maintenance facing enterprises today? How can your enterprise prepare for them?\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/\" \/>\n<meta property=\"og:site_name\" content=\"SIEM Tools & Security Event Management | Solutions Review\" \/>\n<meta property=\"article:published_time\" content=\"2020-06-10T20:37:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-06-16T19:07:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"433\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/\",\"name\":\"Three Potential Business Challenges in SIEM Maintenance\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\",\"datePublished\":\"2020-06-10T20:37:38+00:00\",\"dateModified\":\"2020-06-16T19:07:28+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"What are the three potential challenges in SIEM maintenance facing enterprises today? How can your enterprise prepare for them?\u00a0\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\",\"width\":800,\"height\":433,\"caption\":\"Predictions: The Top SIEM Threats of 2021 (And How to Prevent Them)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Three Potential Challenges in SIEM Maintenance\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"SIEM Tools & Security Event Management | Solutions Review\",\"description\":\"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Three Potential Business Challenges in SIEM Maintenance","description":"What are the three potential challenges in SIEM maintenance facing enterprises today? How can your enterprise prepare for them?\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/","og_locale":"en_US","og_type":"article","og_title":"Three Potential Business Challenges in SIEM Maintenance","og_description":"What are the three potential challenges in SIEM maintenance facing enterprises today? How can your enterprise prepare for them?\u00a0","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/","og_site_name":"SIEM Tools & Security Event Management | Solutions Review","article_published_time":"2020-06-10T20:37:38+00:00","article_modified_time":"2020-06-16T19:07:28+00:00","og_image":[{"width":800,"height":433,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/","name":"Three Potential Business Challenges in SIEM Maintenance","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","datePublished":"2020-06-10T20:37:38+00:00","dateModified":"2020-06-16T19:07:28+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"What are the three potential challenges in SIEM maintenance facing enterprises today? How can your enterprise prepare for them?\u00a0","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","width":800,"height":433,"caption":"Predictions: The Top SIEM Threats of 2021 (And How to Prevent Them)"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/three-potential-challenges-in-siem-maintenance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Three Potential Challenges in SIEM Maintenance"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"SIEM Tools & Security Event Management | Solutions Review","description":"Evaluating Enterprise SIEM Systems, Log Management Analytics & SOAR Platforms.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3053"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3053"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3053\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2445"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}