Cybersecurity glossary
What is SIEM?
Also known as: security information and event management
Definition
A SIEM (security information and event management) system collects logs from across an organization, correlates them and raises alerts for analysts to investigate.
Why it matters
A SIEM is only as useful as the logs it receives and the detections written for it. SOC analysts use it to search events, such as Windows security event IDs, during investigations.
Common questions about SIEM
See also
Sources
Related Guides
GuideSmall Business Security
Small Business Cybersecurity Checklist: The Core Controls
A practical small business cybersecurity checklist covering access controls, patching, backups, encryption, and network defense to secure your business.
Read more GuideGRC
10 Ways to Protect PII in Your Organization
Learn how to protect PII across systems using practical safeguards, impact assessments, access controls, and retention rules for privacy teams.
Read more