Well from solution perspective one can have as many ... I wanted to draw attention to Business Scope, Requirements, and then see what product fits in and what one wants from SIEM, Must haves are depending what a org wants but a baseline looks like 1.Which Devices Will You…

IT infra Assesment(HML), EPS Log estimation(Sizing), Compliance triggers , Security Intelligenge and Risk profiling realtime

Before the start of a SIEM , it is very important to set a scope. The scope is the driver behind SIEM and can be related to compliance, security and operations . It can be a combination of all three and should encompass the entire company. Its highly Imp to know the driver…