SIEM

A SIEM (security information and event management) platform collects logs from servers, firewalls, laptops and cloud apps, then correlates them to flag activity worth a human's attention. It also keeps the records auditors ask for. A SIEM needs people to tune it and read its alerts, so most small businesses meet one through a managed provider instead of running their own.