Next-Gen SIEM

A Next-Gen SIEM is the modern further development of classic security information and event management systems. While traditional SIEM platforms were often strongly characterized by log collection and rule-based queries, modern approaches rely more on cloud architecture, analytics and automation. The focus is on faster searches, better scalability and more meaningful prioritization of security events. This is relevant for security operations centers in particular, because data volumes, the variety of sources and the speed of attacks have increased significantly in recent years.

A Next-Gen SIEM can help to bring together log data, telemetry and context information efficiently. This gives the Security Operations Center a better basis for automated attack detection, investigation and response. The topic also plays an economic role, because modern platforms are intended to reduce costs and operational effort compared with legacy approaches. For many organizations, Next-Gen SIEM is therefore less a single product than a building block of SOC modernization.

See also: Security Analytics and Security Orchestration, Automation and Response.