SIEM is allowing the proactive monitoring of the networks and the identification of security threats in real time. SIEM is flexible and scalable and can be easily integrated with Log-sources from various system – from network equipment and storage devices to operating systems and applications. SIEM collects logs and performs quick searches. SIEM offers a comprehensive overview of the activities in the corporate network and documents all transactions carefully. In case of information leakage SIEM is securing logs and allows an overview of the data accessed. Thereby SIEM enables besides others quick information flow to authorities.