Skip to content

SIEM (Security Information and Event Management)

What is SIEM (Security Information and Event Management)?

A technology platform that aggregates and analyses log data from across an organisation's IT infrastructure to detect security threats and support incident response.

Information Security

Related terms

Incident Response

Frameworks that govern siem (security information and event management)

NIST Cybersecurity Framework 2.0View framework →ISO 27001:2022View framework →CIS Controls v8View framework →

What the standards actually require on siem (security information and event management)

Requirements naming siem (security information and event management) across 3 standards, quoted from the control text.

ISMAP (Japan)1 control

ISMAP Cloud Operations covers the day-to-day security operations of cloud services. (1) Cloud Security Monitoring and Logging: 24x7 Security Operations Center (SOC) + SIEM Security Information and Event Management (Splunk + Microsoft Sentinel + IBM QRadar + Su...

ISMAP-CloudOperations-Monitoring-Logging-IncidentResponse-NISC-Reporting-Vulnerability-Change-SLA · ISMAP Cloud Operations - Security Monitoring + SIEM + Logging + Incident Response + NISC Reporting + Vulnerability Management + Penetration Testing + Change Management + SLA Management →
Japan FSA Cybersecurity Guidelines for Financial Institutions1 control

Continuous security monitoring + 24x7 SOC operations are expected per FSA Cybersecurity Guidelines particularly for Tier 2/3 institutions. (1) SOC Operating Models: (a) Internal SOC - dedicated team + tooling;

JP-FSA-CYB-Security-Monitoring-SOC-Operations-SIEM-EDR-MDR-XDR-24x7-Detection-Alert-Triage · Japan FSA Cybersecurity Security Monitoring + SOC 24x7 Operations + SIEM + EDR + MDR + XDR + Detection + Alert Triage + Threat Hunting + Incident Response Integration + Threat Intelligence Integration + UEBA →
MARS-E1 control

Implement NIST 800-53 AU Audit and Accountability family + CM Configuration Management family + Information System Continuous Monitoring (ISCM) program per MARS-E v2.0.

MARS-E-Audit-Accountability-Continuous-Monitoring-AU-Family-CM-Family-SIEM-Log-Retention-IRS-Pub-1075 · MARS-E Audit + Accountability + Continuous Monitoring + AU + CM Families + SIEM + IRS Pub 1075 →

Questions people ask about siem (security information and event management)

What is SIEM (Security Information and Event Management)?
A technology platform that aggregates and analyses log data from across an organisation's IT infrastructure to detect security threats and support incident response.
Why is SIEM (Security Information and Event Management) important for compliance?
SIEM (Security Information and Event Management) is a key concept in Information Security. Understanding siem (security information and event management) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
What concepts are related to SIEM (Security Information and Event Management)?
Key concepts related to SIEM (Security Information and Event Management) include Incident Response. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address SIEM (Security Information and Event Management)?
SIEM (Security Information and Event Management) appears in the requirement text of ISMAP (Japan), Japan FSA Cybersecurity Guidelines for Financial Institutions, MARS-E. Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about SIEM (Security Information and Event Management)?
Explore our compliance framework pages to see how siem (security information and event management) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how SIEM (Security Information and Event Management) applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.