What is Security Information & Event Management (SIEM)?
As organisations connect to a growing number of third parties - customers, partners, suppliers, service providers and vendors - their infrastructure becomes vulnerable to risk, including intrusion attempts and other security incidents.
These can be both internal and external, and focus on multiple points across the network. Attacks can only be detected and prevented by continuous monitoring of logs from multiple sources including firewalls, servers, databases, applications, IDS and physical access logs.
Overview of our service
Security Alliance offers a fully-managed security information and event management (SIEM) service, designed to automatically collect security events from key points across the network, correlate the data and provide both automated and human analysis of security threats.
This service is run from a fully-established, ISO27001 certified Security Operations Centre (SOC).
The architecture of our security information & event management service collects, normalises, aggregates, filters and correlates millions of events from thousands of assets across the customer's network into a manageable stream of data, which is then prioritised according to risk levels. The events are then analysed in order to minimise false positives and false negatives, enabling a high degree of accuracy in identifying intrusion events and other security incidents.
Real-time detection and analysis of events enables the client to react quickly in order to minimise security and business impact.
Key service attributes
- Real-time detection, alert and response
- Multi vendor and platform support
- 250+ pre-defined report templates
- Attack correlation of logs from multiple sources
- Database and transaction level monitoring
- Smart utilisation of bandwidth
- Historic forensic analysis
What you receive
- Online reports
- Event-based trend analysis, with root cause analysis for long-term measures
- Regulatory compliance reports
- Dashboards
- Alerts
What to do next
Contact us on 0844 488 0964, email us at info@securityalliance.co.uk or complete our Enquiry Form to discuss requirements, get an online demonstration, request a sample report or arrange a meeting.