Everything providers need to know about evaluation, architecture and deployment

Oct 30, 2012 14:06 GMT  ·  By

The Cloud Security Alliance (CSA) has released a Security Information and Event Management (SIEM) report that’s designed to provide guidance on how to evaluate, architect and deploy SIEM services for enterprise and cloud-based networks, applications and infrastructure.

Created by the Security as a Service (SecaaS) Working Group, the report is part of the CSA’s SecaaS Implementation Guidance.

“The purpose of this research is to define what Security as a Service means to organization and provide guidance on how these new practices should be best implemented,” Jim Reavis, co-founder and executive director for the CSA, explained.

“Bringing event, threat and risk data seamlessly together is the foundation of SIEM, however doing it in a services model presents a variety of new challenges. This new Guidance will go a long way to helping IT security managers, technical architects, and systems manager take a more comprehensive approach to providing SIEM as a service under a Security as a Service model.”

The 33-page report covers topics such as requirements, implementation considerations and concerns, and details on the actual implementation.