SIEM
Technology & Computing abbreviation · Cybersecurity
| Stands for | Security information and event management |
|---|---|
| Categories | Technology & Computing |
SIEM stands for Security information and event management, a cybersecurity abbreviation.
A platform that collects logs and security events from servers, network devices, cloud services and applications, correlates them and raises alerts on suspicious activity. Splunk, Microsoft Sentinel, IBM QRadar and Elastic Security are examples.
Example: The SIEM fired an alert when the same account logged in from Lagos and Lisbon within ten minutes.
Usage notes
Gartner analysts Mark Nicolett and Amrit Williams coined the term in 2005, merging security information management and security event management. SIEMs sit at the center of security operations centers and compliance reporting. Pricing based on data volume makes them expensive, prompting log-filtering strategies. Pronounced "sim".
Related abbreviations
More cybersecurity abbreviations
- SASE – Secure access service edge
- SAST – Static application security testing
- SBOM – Software bill of materials
- SCA – Software composition analysis
- SHA – Secure Hash Algorithm
- SHA-256 – Secure Hash Algorithm 256-bit
- SOAR – Security orchestration, automation and response
- SOC – Security operations center
- SOC 2 – System and Organization Controls 2
- SPF – Sender Policy Framework
- SQLi – SQL injection
- SSL – Secure Sockets Layer