Security analytics (SA) has garnered a lot of attention during the past few years. However, marketing hype and misunderstandings regarding SA have confused the market, making it difficult for security and risk (S&R) leaders to make informed decisions. This report provides a clear definition of SA, examines its characteristics, describes its benefits, and explains how S&R leaders can work SA into their security program.