Enterprises are implementing more and more solutions to address their IT security concerns, but this is leading to information overload. The event data produced by these tools, in addition to the information derived from workstation, server and network device logs, is simply too voluminous to be analyzed, validated, and acted upon efficiently. In order to keep up with the crush, more efficient feedback management is needed.

SIM to the Rescue

Security Information Management (SIM – alternately referred to as Security Incident Management, Security Event Management or Enterprise Security Management) is a technology that consolidates, aggregates, and filters security information allowing for more efficient identification and actioning of security violations.

SIM solutions are available from a wide variety of software vendors, but all effectively work in the same manner:

• Acquire data from enterprise sources. Typically SIM solutions are agentless (i.e. no software component needs to be installed on the monitored devices) and integrate with existing security solutions...