Security Information and Event Management (SIEM)

A SIEM platform collects, normalises and analyses logs and security events from across infrastructure, applications and cloud services. It correlates signals to surface suspicious behaviour and support investigations. The industry consensus is that SIEM is a core visibility and compliance tool, but its value depends on good data sources, tuned rules, and alignment with response and recovery workflows, not just log aggregation.