Cyentia Institute: Quantifying SIEM Effectiveness
This report with Cyentia Institute analyzes a dataset of more than 54 billion events fed into more than 154k policies generating an average of more than 750k violations per hour. The goal? To quantify research assumptions and findings in a way that can help organizations calibrate what’s going on in their own environments.
This report provides key findings to business leaders, including:
- More data sources will beget exponentially more policies
- More visibility means more signals to analyze
- More signals to analyze correlates with less signal actually analyzed
- Prioritize signal, rather than focusing on increasing noise