prEN 304 622 V1.0.0

The present document specifies technical requirements and corresponding assessment criteria for Security Information and Event Management related to cybersecurity.
The products with digital elements in scope, hereinafter "SIEM" or "SIEM systems":
• are specified within the "technical description" of the "category of product" number 7 by the Commission Implementing Regulation (EU) 2025/2392 as: Products with digital elements that collect data from multiple sources, analyse and correlate that data and present it as actionable information for security-related purposes, such as threat and incident detection, forensic analysis or compliance purposes.
• are covered only within the product context described in clause 4.
The present document covers those products for the purpose of demonstrating compliance with the essential cybersecurity requirements of Regulation (EU) 2024/2847 Annex I, Part I under the conditions identified in Annex A.
SIEM systems intended for use in the industrial operational technology (OT) domain are excluded from the scope of the present document, see prEN 50770 series.