Security explained
What is SIEM, and what makes security logs useful?
Security information and event management supports analysis of selected logs. Collection alone is not a complete monitoring or response service.
SIEM in plain English
SIEM stands for Security Information and Event Management. It brings security records from selected sources together so activity can be analysed. Logs can provide evidence for understanding an event, but collecting records does not itself establish that someone has reviewed them or resolved a problem.
Start with the sources and the questions
A useful service needs to identify which systems supply logs, what the collection excludes and how missing data is noticed. It also needs an agreed retention period, appropriate access and a process for assessing findings.
For a business owner, the practical questions are straightforward. Which important services are covered? Who looks at alerts? How are actions recorded? What can the report actually establish? An incomplete evidence set should remain visible rather than be labelled a clean security result.
Logs do not create certification
A report can support a review of controls and incidents. It does not by itself establish legal compliance, certification or complete visibility. SIEM is also different from a security operations centre: one is a technical capability, while the other concerns an operating team and its processes.
What FutureMSP can state today
Monitoring is available for supported onboarded systems within agreed coverage. Wider cross-source correlation and unified reporting are still being developed. We do not describe a complete estate-wide SIEM or continuously staffed FutureMSP security centre as live. Ask us to explain the specific evidence and review arrangements available for your business.
Questions you may have
Is a log dashboard proof that all our systems are monitored?
No. It only represents the sources and records supplied to it. Coverage, data freshness and review responsibilities need separate checks.
How long should security logs be kept?
Agree retention for the purpose, systems and obligations involved. This article does not prescribe a universal period or establish a FutureMSP allowance.
Explore related services
Sources and further reading
- https://csrc.nist.gov/glossary/term/security_information_and_event_management
- https://www.microsoft.com/en-us/security/business/security-101/what-is-siem
- https://www.cyber.gc.ca/en/guidance/using-security-information-event-management-tools-manage-cyber-security-risks-itsm80024
Sources reviewed 22 October 2026. Product capabilities do not establish your contracted FutureMSP coverage.
