More than one-third of enterprises plan to have adopted SIM technology by mid-2008. Interestingly, most of them are driven by compliance mandates more than a desire to create a world-class security operations center or to improve investigative capabilities. Overall, SIM is expanding its reach beyond traditional IT security, and its scope is blurring with wider IT management and IT governance, risk, and compliance (IT GRC) initiatives. This will make it unlikely to profoundly change the ability of many smaller SIM vendors to satisfy customer needs. Many of these vendors will need to specialize in specific aspects of a wider SIM solution or have their market share cannibalized by large IT vendors.