Page 8 - Cyber Warnings

5 mistakes hindering effectiveness of SIEM solutions: Learning

from real-life cases

With a SIEM solution installed, the security department can think it’s time to grab some popcorn
and watch the system perfectly dealing with all possible threats impending their networks. Ah, if
only it all would be so easy.

According to the survey conducted by 451 Research, only 31.9% of respondents get more than
80% of the value they expected from their SIEM system, while another 42.8% claim to benefit
from only 16-60% of their SIEM system’s capabilities. It means that the majority of implemented
SIEM solutions don’t prove even a half of their real potential, thus letting intruders stay unseen
within corporate networks. But why?

Are SIEM systems to blame?

SIEM software is always the first to blame when a company fails to improve their information
security environment. When the system is prone to performance issues or overlooks security
events, it’s easy to conclude that this solution doesn’t meet a company’s requirements and thus
cannot handle its mission. However, in the real life, issues often result from human negligence
towards vital details ensuring a SIEM solution’s viability.

8 Cyber Warnings E-Magazine October 2016 Edition
Copyright © Cyber Defense Magazine, All rights reserved worldwide