Security information and event management (SIEM) has greatly improved over the last 16 years, but the underlying architecture remains similar. SIEM is composed of a data management layer designed to collect and process raw security data. 28% of enterprise organizations collect and analyze significantly more data than they did two years ago, according to ESG research. Security professionals and technology vendors should prepare accordingly. Security professionals demand control and would rather own and operate the whole enchilada than move sensitive security data to a third-party cloud.”]
Source: https://www.csoonline.com/article/3309944/cloudy-future-for-security-analytics.html