My Blueprint for Designing a SIEM Deployment Publishes

Another new document on SIEM that I wrote just published: Blueprint for Designing a SIEM Deployment. “Planning a distributed enterprise SIEM deployment is challenging for information security teams at many organizations. This Blueprint shows the architecture and timeline for an enterprise security information and event management deployment and highlights key tasks for each stage. “ This is another new Gartner GTP document type called “an architectural blueprint”, and it has distinctly non-Burton’ian length: 2 pages (!), with one taken by a picture. GTP Blueprints make perfect gifts for your favorite IT architect 🙂

For reference, here are my other SIEM research papers [access requires Gartner GTP subscription]:

• Evaluation Criteria for Security Information and Event Management (2014)
• Security Information and Event Management Futures and Big Data Analytics for Security (2014 update)
• Security Information and Event Management Architecture and Operational Processes (2012, being updated now)
• SIEM Market Trends, Solutions, Assessment and Select Product Profiles (2012, planned for an update)

For those without a GTP subscription, some fun SIEM blog posts:

• “Stop The Pain” Thinking vs the Use Case Thinking
• More on SIEM Maturity – And Request for Feedback!
• On SIEM Tool and Operation Metrics
• SIEM Analytics Histories and Lessons
• How to Use Threat Intelligence with Your SIEM?
• Popular SIEM Starter Use Cases
• Detailed SIEM Use Case Example
• On “Output-driven” SIEM
• On SIEM Deployment Evolution
• On People Running SIEM
• On SIEM Processes/Practices
• On Large-scale SIEM Architecture
• All posts tagged SIEM