Magic Quadrant for Security Information and Event Management 2009

gartner.com

Gartner SIEM

Security information and event management (SIEM) technology provides real-time monitoring and historical reporting of security events from networks, systems and applications. SIEM deployments are often funded to address regulatory compliance reporting requirements, but organizations should also use SIEM to improve security operations, threat management and incident response capabilities.

The 2009 Magic Quadrant for SIEM evaluates technology providers with respect to the most- common technology selection scenario — an SIEM project that is funded to solve a compliance reporting issue, but with secondary requirements for effective threat monitoring and SEM. There are numerous variations in SIEM product architecture and deployment options, and wide variation in capabilities for log management, SEM and user monitoring.

Evaluation Criteria

• Market Understanding
• Marketing Strategy
• Sales Strategy
• Offering (Product) Strategy
• Business Model
• Vertical/Industry Strategy
• Innovation
• Geographic Strategy