Security information and event management

This article's lead section may be too short to adequately summarize the key points. Please consider expanding the lead to provide an accessible overview of all important aspects of the article. (August 2021)

Security information and event management (SIEM) is a field within the field of computer security, where software products and services combine security information management (SIM) and security event management (SEM).^[1][2] SIEM is the core component of any typical Security Operations Center (SOC), which is the centralized response team addressing security issues within an organization.^[3]

They provide real-time analysis of security alerts generated by applications and network hardware. Vendors sell SIEM as software, as appliances, or as managed services; these products are also used to log security data and generate reports for compliance purposes.^[4] The term and the initialism SIEM was coined by Mark Nicolett and Amrit Williams of Gartner in 2005.^[5]