In 2015, a publicly-traded insurance company purchased a SIEM solution, which we’ll refer to as SIEM15. Three years later, due to the inadequate threat detection capabilities of SIEM15, the company invested in a second SIEM solution, SIEM18. By 2021, facing financial constraints and finding SIEM18's UEBA capabilities insufficient, they switched to another SIEM solution, SIEM21, which provided both UEBA and SIEM functionalities. Despite transitioning through 3 different SIEM vendors, the company is still obligated to pay full renewal fees for all 3 solutions - SIEM15, SIEM18, and SIEM21 - due to regulatory requirements mandating the storage of 3 years’ worth of data. Consequently, they cannot retire SIEM15 until 2025, and will face similar challenges with SIEM18 until 2028.

Read the full report by clicking on the download button below.