A SIEM can represent a significant investment.
The cost is not limited to the license.
The following must be taken into account:
- licenses
- data volume
- storage
- infrastructure
- integration
- configuration
- maintenance
- development of rules
- Threat Intelligence
- staff
- SOC
- training
- tuning
- support.
The cost can therefore become significant.