Surveys revealed that security needs of mid-sized organizations become more sophisticated

The Security Division of href="http://www.dqweek.com/EMC-appoints-Alok-Tandon-as-Director-of-Channels-and-Strategic-Alliances-">
EMC has
released the results of two new research initiatives that explore log
management priorities for mid-sized organizations. The first survey
conducted by SANS Institute was based on data sampling collected from
its Sixth Annual Log Management Survey Report, focusing on small and
mid-sized organizations with less than 2,000 employees. This new data
ranked security issues as highest for users of log management
solutions. The second survey of 50 mid-sized organizations, conducted
by RSA, offers similar results of security being a primary concern
for Security Information and Event Management (SIEM) users.

The SANS survey reports are in large
part consistent throughout company sizes. However, on breaking down
the data, the research revealed that almost 80 percent rank detection
and prevention highest in criticality. This research reveals a trend
that mid-sized organizations better understand the importance of
collecting logs and how they get the best information from what is
being collected. Interestingly respondents reported that logs are
most useful for forensic analysis and correlation, followed by
detection and prevention, both at more than 90 percent, suggesting
the needs of mid-sized organizations that are becoming more
sophisticated and which demand more value from their log management
systems.

“Until now, compliance to regulations
has been a catalyst, enabling log management to grow and mature as
never before,” said Sam Curry, RSA's Chief Technologist. “Now
that this technology is in place, there is an option to take
advantage of some of the more sophisticated SIEM tools that are
designed to support the evolving security needs of mid-sized
organizations.”

“This data suggests that
organizations want and need the efficiency of a log management
solution to move beyond compliance to security detection, reaction
and prevention as well as to augment effective IT and network
operations.” said Jerry Shenk, Senior Analyst, SANS. RSA conducted
a separate survey of mid-sized organizations to understand the
mid-sized market for log management and SIEM. The results bring in
suspicions that security is moving up as a top priority in this
market. Survey revealed that the primary usage
for respondents' SIEM solution was for security operations
functioning at 89 percent, compared to 54 percent of those who cited
the compliance. Moreover, these results reported that 66 percent of
those surveyed had ranked real-time monitoring as most important when
evaluating a SIEM vendor. This research also revealed that
more than 75 percent felt real-time monitoring is essential.

“We need a flexible and dynamic
solution that allows us to quickly adapt to new security threats,”
said Paolo Bragadini, SOC Manager, Communication Valley. “Having a
SIEM solution that allows us to achieve greater security, without
over burdening our analysts with too much data, helps us to better
streamline costs.”