Item: IBM Security QRadar SIEM
Rating: 9
Author: Laura Guerrero

Use Cases and Deployment Scope

I make the use case based on needs of the bank, based on requests to the entity.

Pros and Cons

Visibility to different log source types
Manipulation of use cases to make them conform to the need
Long time data correlation in real time

Visibility of custom searches in the profiles created for the reach of all users
Integration to cloud services

Return on Investment

Improvements in alerting based on business needs through adaptations in use cases
Monitoring and visibility of events for review in real time and past time to resolve security incidents
Support in meeting the needs of entity requests

Ease of Integration

The integration of on-premise services is good, but you still cannot have visibility over the best-known services found in the cloud.

In my experience I have had cases in which they are not given the priority that I would expect, since perhaps they do not know the needs of the business, which is why sometimes I have had to wait a long time for attention. Other times they have not provided me with support and with documentation support I have found the solution on my own.

Yes, I have had cases in which I have received good attention, but I have also had more in which the response has been deficient.

Key Insights

Do you think IBM Security QRadar SIEM delivers good value for the price?

Not sure

Are you happy with IBM Security QRadar SIEM's feature set?

Yes

Did IBM Security QRadar SIEM live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of IBM Security QRadar SIEM go as expected?

I wasn't involved with the implementation phase

Would you buy IBM Security QRadar SIEM again?

Yes

Likelihood to Recommend

IBM Security QRadar SIEM works well in terms of event correlation, customization of use cases, visibility of log source on premise, however, when moving forward with the integration of log source in the cloud, there is no identification for the correct scope of the events. Additionally, something in visibility is lost for profiles that are not admin.

Good solution, wide visibility

Software Version

Modules Used

Overall Satisfaction with IBM Security QRadar SIEM