Patent ID: 8782784

Claim:
A method of providing security incident and event management (SIEM) infrastructure in a computer networking environment of a client, the SIEM infrastructure being constructed and arranged to monitor and record in an event log events within the computer networking environment, the SIEM infrastructure including i) software installed on a computer-readable medium that is configured to generate event log data and incident reports, and ii) hardware on which the software runs, the method comprising: performing, on a computer, a SIEM maturity evaluation operation that is configured to produce a SIEM maturity result indicative of whether the client has proper resources to achieve a successful implementation of the SIEM infrastructure on the computer networking environment, the successful implementation of the SIEM infrastructure enabling the client to react to events recorded in the event log; performing an install operation on the SIEM infrastructure in the computer networking environment when the SIEM maturity result indicates that the client has the proper resources to successfully implement the SIEM infrastructure; and delaying the install operation on the SIEM infrastructure in the computer networking environment when the SIEM maturity result indicates that the client does not have the proper resources to successfully implement the SIEM infrastructure; wherein the SIEM maturity evaluation operation involves defining a SIEM framework, the SIEM framework including a set of SIEM components, each SIEM component of the set of SIEM components representing a resource necessary for successful implementation of the SIEM infrastructure and having a value that is indicative of a contribution of that SIEM component to the SIEM maturity result; wherein performing the SIEM maturity evaluation operation includes: for each SIEM component of the set of SIEM components of the SIEM framework, assigning the value of that SIEM component based on the resources of the client that are represented by that SIEM component.