What is a SIEM?
SIEM stands for security information and event management. A SIEM collects logs from many systems into one place, correlates them, and raises alerts on suspicious patterns. Examples include Splunk, Microsoft Sentinel, and Datadog Cloud SIEM.
What the buyer is really asking
The buyer is really asking whether your logs are centralized and correlated. Plenty of smaller companies do not run a SIEM. Describe the monitoring you do have rather than implying one.
Other ways buyers ask it
Every one of these wants the same answer:
- “Do you use a SIEM?”
- “Are logs centralized?”
- “How do you correlate security events?”
Evidence to have ready
- The log aggregation and alerting stack in use
- A plain statement if no SIEM is in place
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.