You've probably encountered the acronym SIEM, but how does it apply to IT? According to a FedTech Magazine story, "security incident and event management (SIEM) tools combine two infosec abilities: Information and event management.
"While information management focuses on the aggregation and collection of existing security data from sources such as firewalls, anti-virus tools and intrusion-detection systems, event management prioritizes security incidents - from benign mistakes such as staff accidently entering the wrong password to potential breaches tied to malicious code or unauthorized resource access."