RSMM
RSMM · SIEM Sanity Checklist

Is your SIEM a security tool or expensive log storage?

Seventy-nine questions across thirteen areas. No buzzwords, no vendor slides. Answer honestly and you get a sanity score, a profile of where the weak areas are, and a name for what you are running.

You do not need a SIEM maturity model if you cannot find your own alerts. Answer for how things actually are this week, not how they are described in the architecture document.
Not started
0/79

Your sanity score

Scored as yes, partly or no. Partly counts as half, because half a control is half a control.

0%

Where it hurts

Score by area. Anything under half is doing active damage, not just underperforming.

Start here

    Now check your maturity level