The COVID-19 pandemic is an opportunity for cybercriminals as organizations reduce focus on security protocols due to time-sensitive remote access initiatives. SIEM can help manage risk by monitoring user authentication failures and communication over unencrypted channels.