Skip to content

SIEM (Security Information and Event Management)

What is SIEM (Security Information and Event Management)?

A technology platform that aggregates and analyses log data from across an organisation's IT infrastructure to detect security threats and support incident response.

Information Security

Related terms

Incident Response

Frameworks that govern siem (security information and event management)

NIST Cybersecurity Framework 2.0View framework →ISO 27001:2022View framework →CIS Controls v8View framework →

What the standards actually require on siem (security information and event management)

Requirements naming siem (security information and event management) across 2 standards, quoted from the control text.

ISMAP (Japan)1 control

ISMAP Cloud Operations covers the day-to-day security operations of cloud services. (1) Cloud Security Monitoring and Logging: 24x7 Security Operations Center (SOC) + SIEM Security Information and Event Management + UEBA User and Entity Behaviour Analytics + S...

ISMAP-CloudOperations-Monitoring-Logging-IncidentResponse-NISC-Reporting-Vulnerability-Change-SLA · ISMAP Cloud Operations - Security Monitoring + SIEM + Logging + Incident Response + NISC Reporting + Vulnerability Management + Penetration Testing + Change Management + SLA Management →
MARS-E1 control

Implement NIST 800-53 AU Audit and Accountability family + CM Configuration Management family + Information System Continuous Monitoring (ISCM) program per MARS-E v2.0.

MARS-E-Audit-Accountability-Continuous-Monitoring-AU-Family-CM-Family-SIEM-Log-Retention-IRS-Pub-1075 · MARS-E Audit + Accountability + Continuous Monitoring + AU + CM Families + SIEM + IRS Pub 1075 →

Questions people ask about siem (security information and event management)

What is SIEM (Security Information and Event Management)?
A technology platform that aggregates and analyses log data from across an organisation's IT infrastructure to detect security threats and support incident response.
Why is SIEM (Security Information and Event Management) important for compliance?
SIEM (Security Information and Event Management) is a key concept in Information Security. Understanding siem (security information and event management) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
What concepts are related to SIEM (Security Information and Event Management)?
Key concepts related to SIEM (Security Information and Event Management) include Incident Response. Understanding these interconnected concepts provides a more comprehensive view of Information Security requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address SIEM (Security Information and Event Management)?
SIEM (Security Information and Event Management) appears in the requirement text of ISMAP (Japan), MARS-E. Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about SIEM (Security Information and Event Management)?
Explore our compliance framework pages to see how siem (security information and event management) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how SIEM (Security Information and Event Management) applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.