{"id":818,"date":"2017-03-02T12:48:39","date_gmt":"2017-03-02T16:48:39","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=818"},"modified":"2017-03-09T12:57:15","modified_gmt":"2017-03-09T16:57:15","slug":"half-of-siem-users-find-threat-intelligence-unsatisfactory-ponemon-reports","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/half-of-siem-users-find-threat-intelligence-unsatisfactory-ponemon-reports\/","title":{"rendered":"Half of SIEM Users Find Threat Intelligence Unsatisfactory, Ponemon Reports"},"content":{"rendered":"

\"ponemon-institute-header\"Nearly half of all users of Security Information and Event Management (SIEM) solutions are unsatisfied with the threat intelligence provided by their tools, according to new research<\/a> conducted by the Ponemon Institute and Cyphort. The report, Challenges to Achieving SIEM Optimization<\/em>, examines issues and attitudes from SIEM users in 559 large organizations across the United States. According to the study, 76 percent of respondents value their SIEM as a strategically important security tool, yet just 48 percent were satisfied with the actionable intelligence they get from their SIEMs.<\/p>\n

\u201cThe root of their dissatisfaction seems to be related to the complexity of the SIEM itself,\u201d says Dr. Larry Ponemon, chairman and founder of the Ponemon Institute. \u201cIn fact, 75 percent of respondents said there is significant, or very significant, effort involved in configuring their SIEM for their organization. Obviously, this complexity can make it very difficult to extract the value they want and need.\u201d The issue of complexity was also evident in the total cost of ownership for SIEM solutions.<\/p>\n

Just 25 percent of total SIEM cost is related to the initial purchase of the software, according to the Ponemon Institute’s research. The other 75 percent of the cost is for installation, maintenance, and staffing. Surprisingly, 78 percent of the organizations surveyed have one or less full-time staff assigned to SIEM administration, and yet 64 percent or organizations pay more than $1 million annually for external consultants and contractors to assist with SIEM configuration and management. \u201cThis data also indicates that the demand for trained security analysts exceeds the supply of skilled talent available to fill these positions,\u201d added Dr. Ponemon.<\/p>\n

User dissatisfaction and general frustrations were evident in the report’s other key findings as well:<\/p>\n