Vendor Scorecard: Security

Information and Event Management

Insights into technology and security decision-
makers perceptions of, and experiences with,
security information and event management
Purpose and Methodology
SURVEY SAMPLE IT/SECURITY EXECUTIVE ORGANIZATION SIZE

TOTAL
424 respondents who are Yes, top IT executive in company 26% Average Company Size 14,691 Employees
involved in decisions regarding
RESPONDENTS Yes, top IT security executive in
Security Information and Event 25%
Management deployment company
Yes, top IT executive at business
MARGIN OF ERROR +/- 4.8 percentage points 6% Top Represented Industries
unit/location
CIO, Computerworld, CSO, Yes, top IT security executive at
InfoWorld, ITworld, and Network 8%
AUDIENCE BASE business unit/location
High Tech 17%
World sites, email, and
LinkedIn forums No 34%
Financial Services 16%
SURVEY METHOD
JOB TITLE BREAKDOWN Manufacturing 12%
COLLECTION Online questionnaire
NUMBER OF
Executive IT/Security 25% Healthcare 8%

QUESTIONS 16 (incl. demographics) Education 8%

IT/Security Management 38%

Survey Goal IT/Security Professional 18%

Services 7%

To gain a better understanding of the Government/Nonprofit 7%

Business Management 13%
security information and event management
Telecommunications & Utilities 5%
vendor community, such as level of Other 4%
awareness, usage and characteristic
influences among organizations.

Source: 2016 CSO Vendor Scorecard: Security Information and Event Management 1
Security Information and Event Management Involvement

Involved in strategy/planning 73%

Determine strategy/solution needs 69%

Evaluate strategies/solutions/services/vendors 71%

Recommend and select SIEM vendors 62%

Approve/authorize the purchase of

44%
SIEM solutions and services

Implement SIEM solutions 48%

Q. In which ways are you personally involved in decisions regarding SIEM deployment at your organization?

Source: 2016 CSO Vendor Scorecard: Security Information and Event Management 2
CSO/CISO Makes the Primary Decision in the Enterprise

60%

47%

Enterprise SIEM
users rank their
28% current vendors
26%
3.52 out of 5 for
level of
satisfaction
7%
5%

IT (CIO) IT Security (CSO/CISO) Other LOB Area

Enterprise SMB

Q. Which department holds primary responsibility for each of the following IT security areas? AND Q. Please rate each security area based on your level of
satisfaction with your current vendor. (Rating is 1-5 with 5 being extremely satisfied)

Source: 2017 IDG Enterprise Security Priorities Survey 3

Current Perceptions and Use of SIEM

Considering
implementing within
the next 13-24 No plans

76% of organizations say months

10%
7%
SIEM technology is critical/very
important when facing threats Likely to implement
Already installed
in the future but are
and attacks struggling to find the
right strategies or 12% 48%
solutions
Enterprise 84%
SMB 67% 14%
8%
Have plans to In the process of
implement over the installing
next 12 months

Q. For your organization, how important is the use of SIEM technologies to understanding the threats you face and the attacks you are experiencing? AND
Q. Have you at any time had a SIEM technology installed in your enterprise?

Source: 2016 CSO Vendor Scorecard: Security Information and Event Management 4
Most Critical Vendor Feature Relates to Desired Outcome
Levels of importance Critical Very/somewhat Not very/not at all

4%
35%
29% 27%
35%
46%
67%
74%

68% 70%
62% 62%
52%
32%
21%
1% 2% 3% 2% 3% 3%
Effectiveness (e.g. Integration with Ability to enable Customer Ease of use Cost Brand
delivers on promises) existing systems automation service/support name/reputation
SMB Ent. SMB Ent. SMB Ent.

38% 53% 27% 43% 34% 21%

57% 46% 68% 57% 63% 77%

3% 0% 5% 1% 3% 2%

Q. How important are the following characteristics when evaluating SIEM vendors?

Source: 2016 CSO Vendor Scorecard: Security Information and Event Management 5
Continue the Conversation
For more information on content marketing or demand generation, explore our
resources on this site under marketing tools, or contact us. We have additional
primary research, blogs and white papers to make you smarter about tech decision
makers, and targeted products and programs to help you reach them!

ADDITIONAL WAYS TO STAY ON TOP OF INFORMATION FROM IDG ENTERPRISE:

To get results from IDG Enterprise research when it happens,

or any other news, follow us on Twitter: @IDGEnterprise

Sign up to receive our monthly marketing

newsletter at www.idgenterprise.com/newsletter

Visit us on LinkedIn:
www.linkedin.com/company/idg-enterprise