--- title: Forrester Finds Over 200% ROI in Azure Sentinel After Three Years description: A Forrester Total Economic Impact™ (TEI) study published this month analyzed the financial effects for companies using Microsoft's Azure Sentinel. Forreste image: https://infusedinnovations.com/hubfs/Imported_Blog_Media/lycs-architecture-U2BI3GMnSSE-unsplash-scaled-2.jpg --- [Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery) # Forrester Finds Over 200% ROI in Azure Sentinel After Three Years by [kristin@infusedinnovations.com](https://infusedinnovations.com/blog/author/kristininfusedinnovations-com) 3 min read November 30, 2020 A Forrester Total Economic Impact™ (TEI) study published this month analyzed the financial effects for companies using Microsoft's Azure Sentinel. Forrester interviewed customers who previously used on-premises SIEM solutions and have now switched to the cloud-based Azure Sentinel. The organizations participating in the study specialized in IT services, big data, financial services, and e-commerce on global scales. Based on these interviews, Forrester found that Azure Sentinel simplifies management, improves efficiency, and reduces costs. ## What is Azure Sentinel? ![Diagram shows tasks of Azure Sentinel: Collect, Detect, Investigate and Respond.](https://infusedinnovations.com/hubfs/Imported_Blog_Media/Azure-Sentinel-2-4.png)   [Azure Sentinel](https://infusedinnovations.com/blog/secure-intelligent-workplace/what-is-azure-sentinel) is a powerful SIEM + SOAR solution that collects data, investigates threats, and responds to them quickly. With the use of Machine Learning, it identifies threats and anomalies faster than solutions were able to in the past. It compares data with dozens of threat possibilities from multiple sources, using Python libraries to investigate queries. Then it provides streamlined, automated responses to incidents with actions and playbooks. Security administrators can view all of this in dashboards with helpful workbooks and graphs. ## Forrester's Finding on How Azure Sentinel Delivers The point of a TEI study at Forrester is to assess all the ways that a particular investment impacts companies economically. These are the key findings that Forrester published in this study, based on aggregated data fron the companies interviewed: - Investment paid back in less than six months - Return on investment (ROI) of 201% after three years - 67% decrease in deployment time, compared to legacy on-premises SIEMs - 79% reduction in false positive alerts - 80% reduction in the amount of labor needed to follow up with investigations - 48% reduction in costs ## Improvements in Ease & Efficiency ![Image of a neat desk suggests ease and efficiency.](https://infusedinnovations.com/hubfs/Imported_Blog_Media/howard-bouchevereau-Ql4Y26OsEoY-unsplash-1024x683-2.jpg)   Participants in the study reported that with their prior legacy SIEM solutions, single events would trigger multiple other ones, creating a cluster of false positive security alerts that were time consuming for security administrators to resolve. Azure Sentinel provided more intelligent analytics that reduced these false positives. (Now, Sentinel can be provide even better threat intelligence [when paired with External Attack Surface Management](https://infusedinnovations.com/blog/secure-intelligent-workplace/an-updated-guide-to-help-you-integrate-riskiq-with-azure-sentinel).) It also allowed security teams to view logs, alerts, and incidents easily in one place. Every customer interviewed said that deployment was also easier and faster than with their traditional legacy solutions. With these improvements, Forrester assessed that overall management efforts were reduced by 56%. ## Cost Savings ![Image shows a plant growing out of coins.](https://infusedinnovations.com/hubfs/Imported_Blog_Media/micheile-henderson-lZ_4nPFKcV8-unsplash-1024x683-2.jpg)   The return on investment comes from a number of different expenses reduced after companies switched to Azure Sentinel. Organizations no longer needed their legacy SIEM vendors, so they saw reduced licensing costs. They also eliminated expensive on-premises infrastructure by switching to the cloud-native option. Here's what companies saved because of these reductions and improvements in efficiency: - $1.2 million savings from management efficiencies - $602K savings from time saved in deployment - An overall savings of $4.9 million after moving from legacy SIEM to Sentinel (a 48% decrease in costs) Another nice difference was that customers were no longer restricted by storage and data ingestion limits, which meant they didn't have to pay for exceeding those limits like they would with other vendors. ## Azure Sentinel: a Wise Choice With Forrester's report, it's clear that legacy SIEM solutions can't compete economically with the more modern Azure Sentinel. And that's to say nothing about the additional strength of the security itself. If you're still using legacy solutions and are interested in giving Azure Sentinel a try, Microsoft offers [a trial](https://portal.azure.com/) as well as a [special offer](https://azure.microsoft.com/en-us/offers/sentinel-microsoft-365-offer/) through May 1, 2021 that gives customers credits for up to 100MB of data ingestion per user per month. Or, for a more comprehensive and guided exploration, we offer a [**free** Azure Sentinel proof of concept that includes an Azure trial](https://infusedinnovations.com/contact), a credentialed vulnerability scan, Microsoft Defender ATP, and email monitoring with DMARC policies. Contact us today to modernize your SOC and start saving money! More Forrester research: - [Total Economic Impact report on Microsoft Zero Trust Solutions](https://infusedinnovations.com/blog/secure-intelligent-workplace/forresters-total-economic-impact-report-for-microsoft-zero-trust-security-solutions) - [Wave assessment gives Azure Sentinel a Leader Placement](https://infusedinnovations.com/blog/secure-intelligent-workplace/forrester-wave-gives-azure-sentinel-a-leader-placement) - [TEI report on Azure Security Center Shows 219% ROI over three years](https://infusedinnovations.com/blog/secure-intelligent-workplace/forresters-tei-report-on-azure-security-center-219-roi-over-three-years) #### **Stay connected.** Join the Infused Innovations email list! #### Share this [Share on X ](https://x.com/intent/post?url=https://infusedinnovations.com/blog/secure-intelligent-workplace/forrester-finds-over-200-roi-in-azure-sentinel-over-three-years&text=Forrester%20Finds%20Over%20200%%20ROI%20in%20Azure%20Sentinel%20After%20Three%20Years) [Share on Facebook ](https://www.facebook.com/sharer/sharer.php?u=https://infusedinnovations.com/blog/secure-intelligent-workplace/forrester-finds-over-200-roi-in-azure-sentinel-over-three-years&t=Forrester%20Finds%20Over%20200%%20ROI%20in%20Azure%20Sentinel%20After%20Three%20Years) [Share on LinkedIn ](https://www.linkedin.com/shareArticle?mini=true&url=https://infusedinnovations.com/blog/secure-intelligent-workplace/forrester-finds-over-200-roi-in-azure-sentinel-over-three-years&t=Forrester%20Finds%20Over%20200%%20ROI%20in%20Azure%20Sentinel%20After%20Three%20Years) Previous [← What Exactly is Behind a Digital Transformation?](https://infusedinnovations.com/blog/secure-intelligent-workplace/what-exactly-is-behind-a-digital-transformation) Next [Who's at the Top of Gartner's 2020 UEM Magic Quadrant? Intune. →](https://infusedinnovations.com/blog/secure-intelligent-workplace/whos-at-the-top-of-gartners-2020-uem-magic-quadrant-intune) ### You May Also Like These Related Posts [Forrester Wave Gives Azure Sentinel a Leader Placement](https://infusedinnovations.com/blog/secure-intelligent-workplace/forrester-wave-gives-azure-sentinel-a-leader-placement) ![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/azure-sentinal-portal-dashboard-full-2.png) [Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery) #### Forrester Wave Gives Azure Sentinel a Leader Placement January 11, 2021 3 min read [Forrester's TEI Report on Azure Security Center: 219% ROI Over Three Years](https://infusedinnovations.com/blog/secure-intelligent-workplace/forresters-tei-report-on-azure-security-center-219-roi-over-three-years) ![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/Screen-Shot-2021-02-27-at-10_37_10-AM-2.png) [Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery) #### Forrester's TEI Report on Azure Security Center: 219% ROI Over Three Years March 1, 2021 3 min read [Forrester Ranks Microsoft a Leader in Cloud Security Gateways](https://infusedinnovations.com/blog/secure-intelligent-workplace/forrester-ranks-microsoft-a-leader-in-cloud-security-gateways) ![](https://infusedinnovations.com/hubfs/Imported_Blog_Media/forrester_wave_max-1000x1000-1-2.png) [Technology Architecture & Delivery](https://infusedinnovations.com/blog/tag/technology-architecture-delivery) #### Forrester Ranks Microsoft a Leader in Cloud Security Gateways June 7, 2021 3 min read ### No Comments Yet Let us know what you think ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "kristin@infusedinnovations.com", "url" : "https://infusedinnovations.com/blog/author/kristininfusedinnovations-com" }, "dateModified" : "2024-07-10T04:20:15.264Z", "datePublished" : "2020-11-30T05:00:00.000Z", "headline" : "Forrester Finds Over 200% ROI in Azure Sentinel After Three Years", "image" : [ "https://infusedinnovations.com/hubfs/Imported_Blog_Media/lycs-architecture-U2BI3GMnSSE-unsplash-scaled-2.jpg" ], "mainEntityOfPage" : { "@id" : "https://infusedinnovations.com/blog/secure-intelligent-workplace/forrester-finds-over-200-roi-in-azure-sentinel-over-three-years", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://infusedinnovations.com/hubfs/ii-logo.svg" }, "name" : "Infused Innovations" } } ```