An organization wants to implement a SIEM deployment architecture. However, they have the capability to do only log collection and the rest of the SIEM functions must be managed by an MSSP. Which SIEM

Question

Options

• ACloud, MSSP Managed
• BSelf-hosted, Jointly Managed
• CSelf-hosted, MSSP Managed
• DSelf-hosted, Self-Managed

• A
  3% (1)
• B
  3% (1)
• C
  94% (32)

Explanation

In a self-hosted, MSSP (Managed Security Service Provider) managed SIEM deployment architecture, the organization retains the SIEM infrastructure within its own premises or private cloud (hence "self- hosted"), but outsources the management, monitoring, and analysis functions to an MSSP. This model allows the organization to have control over the log collection process, ensuring that sensitive data does not leave the organization's environment, while still benefiting from the expertise and resources of an MSSP for the more complex and resource-intensive aspects of SIEM operation. This approach is particularly suitable for organizations that have specific requirements for data sovereignty or industry regulations that restrict data handling but still want to leverage external expertise for security analytics and incident management. "Managed Security Services: The CISO's Guide to Outsourcing Security", SANS Institute. "Choosing the Right SIEM Deployment Model", SecurityWeek.

No community discussion yet for this question.