LogLogic says SIEM is no longer enough to meet security compliance needs

The firm has issued its advice as the EU has indicated it is mulling the introduction of mandatory data breach advisory requirements on companies of all sizes, as well as against the backdrop of corporates handling larger and larger volumes of data on a daily basis.

These issues, says the firm, have led to the emergence of IT data management (ITDM) as a major enterprise initiative.

As a result, adds LogLogic, ITDM has become central to addressing the three cornerstones of the modern, intelligence-driven enterprise, dedicated security threat management, comprehensive data for compliance, and enterprise-wide operational intelligence.

This assertion has also been reinforced by research conducted jointly with industry analyst firm, Forrester Research.

John Kindervag, a senior analyst with Forrester, said that his firm's research illustrates that better decision-making and improved productivity are the major reasons these executives are looking to leverage IT data.

"As IT systems become more and more complex, there will be an increased demand to improve the way in which we define IT metrics and use that data to make important, and sometimes costly, decisions", he said.

"Companies need better ways to do change control and schedule downtime. They need deeper understanding of how resources are being used. They need better data to leverage for capacity planning exercises. The use cases for this data are nearly endless, but we need to find ways of making the data understandable and actionable", he added.

One of the solutions to the problem of than dealing very large volumes of data, says LogLogic, is the use of Security Information and Event Management (SIEM) technology, which the firm says remains an effective tool for optimising security threat identification.

However, says Guy Churchward, LogLogic's CEO, SIEM does not adequately address the scope of compliance or operational intelligence in the dynamic enterprise.

"It is common knowledge that over 30% of enterprise data today is IT data, or data about the enterprise's information technology", he said, adding that complicating matters, that information is scattered across multiple locations, both on-premise and in the cloud.

"It is difficult to access because of multiple, incompatible interfaces, and it is difficult to correlate without greater context", he explained.

According to Churchward, IT data management is unique in allowing data collection from systems scattered throughout the enterprise, comprehensive reporting on that data, and broad-based analysis of the data.

Those three data touchpoints, he claims are critical because many analytic systems in the enterprise `feed on' IT data.

These systems, he says, include IT operations management; security event management; IT governance, risk management, and compliance; service level agreement (SLA) management; and a range of third-party applications.

IT data management, he argues, is the only technology with the scope to access, correlate and present that data to all enterprise applications that require it.

"Enterprises that aggressively adopt ITDM will not be boxed in by the limitations and the coming obsolescence of SIEM", he said.

"Nor will they be adopting ITDM ahead of some perceived future need. Among the enterprises we have surveyed, the need for data analytics has long gone unmet, and virtually all the functionality of mature ITDM tools can be deployed today to start deriving actionable intelligence immediately", he added.

What’s hot on Infosecurity Magazine?