CISM · Question #499
Which of the following would be a global organization's PRIMARY challenge when deploying a SIEM system?
The correct answer is C. Data storage. A global SIEM aggregates logs and event data from systems distributed across every region in which the organization operates, generating extremely high data volumes. This creates two compounding storage challenges: the sheer scale of storage infrastructure required, and complianc
Question
Which of the following would be a global organization's PRIMARY challenge when deploying a SIEM system?
Options
- AData false positives
- BData classification
- CData storage
- DData validation
How the community answered
(58 responses)- A10% (6)
- B3% (2)
- C81% (47)
- D5% (3)
Explanation
A global SIEM aggregates logs and event data from systems distributed across every region in which the organization operates, generating extremely high data volumes. This creates two compounding storage challenges: the sheer scale of storage infrastructure required, and compliance with data sovereignty and residency regulations (such as GDPR) that may restrict where data from certain jurisdictions can be stored or transferred. These regulatory constraints can require separate regional storage architectures, significantly increasing cost and complexity. Data false positives (A) are a tuning and operational challenge but are not unique to global deployments. Data classification (B) and data validation (D) are important but secondary concerns compared to the volume and jurisdictional storage challenge.
Topics
Community Discussion
No community discussion yet for this question.