Gartner defines decision intelligence platforms (DIPs) as software to create decision-centric solutions that support, augment and automate decision making of humans or machines, powered by the composition of data, analytics, knowledge and AI. DIPs enable enterprises to collaboratively design and explicitly model decisions, orchestrate decision flow during execution at scale, and enable monitoring and governance of decision quality, while learning from actions and outcomes. Features can include a combination of rule- and logic-based techniques, machine learning, real-time event stream processing, business intelligence, multimodal data and analytics preparation, natural language, graph technology, optimization, simulation or AI agents for decision intelligence. DIPs provide a solution to enhance how organizations make decisions, whether by humans or machines, individually or collectively. They address the growing challenge of making timely and accurate decisions in volatile, uncertain, complex and ambiguous ecosystems, for more demanding customers in disruptive, competitive and regulated markets. DIPs help by creating executable decision models that improve decision service composition and all-source intelligence to achieve better situational awareness, better recommendations or autonomous actions, tailored to specific decisions and outcomes. They can reduce the risk of poor decisions, allow organizations to anticipate change and respond more swiftly to opportunities at scale.
Security information and event management (SIEM) is a configurable system of record that collects, aggregates and analyzes security event data from on-premises and cloud environments. SIEM processes security event data for the purposes of threat detection, investigation and response. It natively supports data normalization and offers user-configurable detection content and reporting to orchestrate threat mitigation and satisfy compliance requirements. These solutions are delivered via a SaaS platform or client-hosted on-premises or private cloud. The security information and event management (SIEM) system must assist with: 1. Aggregating and normalizing data from various IT and operational technology (OT) environments. 2. Designing and executing near real-time monitoring and alerting content. 3. Enriching and investigating security events of interest. 4. Supporting manual and automated response actions. 5. Maintaining and reporting on current and historical event data.