Security Information and Event Management a Practical Guide (Paperback)

Security Information and Event Management solutions are a combination of the formerly disparate product categories of SIM (security information management) and SEM (security event management). SIEM technology provides real-time analysis of security alerts generated by network hardware and applications. The objective is to help companies respond to attacks faster and organize mountains of log data. SIEM solutions come as software, appliances or managed services. Increasingly, SIEM solutions are being used to log security data and generate reports for compliance purposes. This is a comprehensive guide to SIEM, covering how to select, implement and operate such technology efficiently. The book references existing BS and ISO standards in the 27000 family, including the upcoming ISO standard on SIEM and demystifys the topic. It gives CSO/CIO's clear and un-biased information in order to make an educated decision as to if and which SIEM approach may be adequate to their respective organizations.