the process of obtaining the exact same time on different devices.
all server sending data to the siem should be synchronized with the same time. easier to know when the events occured
this is a measure of dispersion that calculates the square root of the variance.