20 years ago, there was widespread adoption of traditional Security Information and Event Management (SIEM) solutions. Its proven capabilities have meant SIEM is now an integral part of the security stack for most organisations.
The SIEM market has since evolved, with an expansive range of functionality now available to meet customers’ needs. Next-Gen SIEMs, the incorporation of user and entity behaviour analytics (UEBA), and the increased discussion of Extended Detection and Response (XDR), to name a few. While most SIEMs tick the basic requirements, there are growing trade-offs in the purchasing decision between functionality, operating costs, complexity and platforms. Organisations must consider architecture, governance and strategy to ensure the best solution fits their use case.
Changes in the SIEM market
This year has been different to the technical competition of previous years. We have seen almost more changes in ownership of SIEM vendors than the technologies themselves. Some investors are taking the opportunity to fill gaps in their product portfolios or increase market share. Additionally, the disappearance of some long-term players is likely to impact product development roadmaps. How, these changes will affect the market is not yet clear. Smaller participants will inevitably seek to scale and big tech players will continue to simplify SIEM offerings to meet mass market appeal while also looking to aggregate and bundle their predominantly cloud-based offerings.
While this probably doesn’t present immediate concerns for most day-to-day security operations, it should prompt a review of your cyber security strategy and technology needs going forward. Governments and regulators everywhere are highlighting the growing importance of cyber security resilience. This includes its relevance to the broader operational risk management activities of enterprise.
The impact to your organisational resilience
The integration of Threat Detection, Investigation and Response (TDIR) and Exposure Management solutions is re-defining SIEM technology. We are actively seeing how quantitative risk-based security information informs and guides analyst workflows to streamline SOC operations. This coincides with the recent consolidation in the SIEM market which is changing the options available to security and management teams.
The timeliness and relevance of security information available from SIEM technologies has never been more important for the protection and resilience of your organisation and its operations. Information from your SIEM and SOC operations is no longer just about compliance and threat response. This information now goes beyond security teams. Operational and executive teams have an increasing stake in this information and are being held responsible for organisational resilience management. Some organisations seek to simplify their SOC operations and reporting and others are looking to integrate those activities more seamlessly into their cyber security governance to meet changing corporate disclosure obligations.
As cyber security guidance and frameworks sharpen their requirements, 2025 is a good year to start look at the SIEM market again, even for companies and SOC teams that are comfortable with their current choices. At the same time, investigating the link between threat detection, mitigation and the management of high-fidelity exposures will change the cadence and availability of evidence-based SIEM. As a result, this will impact the cyber security governance processes that are increasingly being sought by regulators.
Huntsman Security is here to help
It’s important to investigate how to improve the fidelity of threat information and as a result your cyber security resilience. Additionally, the management of your cyber security and how it fits with your operational risk management activities has both technical and architectural implications. As a result, it is certainly timely to contemplate how your organisation will meet the ongoing organisational resilience requirements of industry regulators and the strategic and technical decisions you will need to make to get there.
Products
Solutions
Learning & Resources
About Huntsman
