Glossary · S
SIEM
A security information and event management system collects logs and events from across an organization’s systems, correlates them and raises alerts for conditions that may indicate an attack.
Extended definition
In more detail.
A SIEM is only as useful as the sources feeding it, the rules it applies and the people who respond to what it raises. Common failures are missing log sources, rules never tuned to the environment, and alerts nobody triages. Log retention also serves investigation and compliance, so the SIEM’s coverage and retention are evidence in their own right.
In our work
Where it appears.
SIEM and log management support covers sources, rules, retention and the coordination of response.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days