Driven by regulatory compliance and security event correlation, most large organizations have deployed a Security Information and Event Management (SIEM) system over the past few years. Does this mean that they are adequately protected? ESG does not believe so. Ominous security threats and a rash of publicly-disclosed data breaches certainly place an intense strain on many legacy security management tools and ESG believes this is just the tip of the iceberg. To accommodate changing business and technology needs, next-generation security management must be built upon a foundation of: 1) Massive data collection, processing, and storage; 2) Deep and diverse data analytics; and 3) Virtualization and cloud intelligence.