Which of the following is MOST likely to reduce the effectiveness of a SIEM system?

Misconfigured alert thresholds can lead to either false positives (alert fatigue) or missed critical events, undermining the purpose of the SIEM.

“SIEM effectiveness relies on appropriate configuration. Poor threshold settings can result in either overwhelming alerts or failure to detect real threats.”

— CISM Review Manual 15th Edition, Chapter 4: Incident Management, Section: Security Monitoring Tools*