Our partners require such configuration as
1) vulnerability scanner A (well known in CIS area)
2) SIEM B (leaders of the market)
And they should perform a scan of the network, get a report then forward it to the SIEM supposedly to challenge the findings against IOC's.
They insist to get the report into the SIEM -- we don't want to argue with them.
Does challenging the report against IOC's via SIEM sound right to you?