Log Management (SIEM)Because security information and event management are central to your cyber security posture... Get in touch
What Is It?
A good SIEM system or capability can provide a comprehensive helicopter-view of your IT infrastructure from a security perspective. At the heart of a good SIEM system is an ability to monitor, manage and log security related information and events.
A mature SIEM offering can include aggregation and reporting, analysis and workflow and correlation techniques – as well as a host of other security benefits e.g. end point protection and behavioural monitoring.
Why Do You Need It?
The primary driver for most organisations to implement or adopt a SIEM solution is typically in response to governmental compliance. This can take one of many forms, but often relates to industry specific requirements like FISMA, PCI etc. or achieving and maintaining a quality accreditation like ISO 27001.
Furthermore, it is simply and essentially good practice to be able to monitor, manage and retain security related information and logs. A cyber breach or a failed audit can have a catastrophic effect on a business. A SIEM capability is a significant deterrent.
If cyber security is not you core business, and you don’t have your own security team and security operations centre, the Log Management (SIEM) managed service from Softwerx may be the correct solution to protect your business.
Our preferred partner is
Powerful threat detection, incident response, and compliance management in one unified platform.
Recently acquired by AT&T Communications, AlienVault is a developer of commercial and open source solutions to manage cyber-attacks, competing principally in the SIEM market-place. Softwerx works as an elite partner with AlienVault, offering their unified security management solution as a standalone licensed product, or more commonly as a managed service.
"Midsize organisations seeking an SIEM-as-a-service delivery model with bundled security controls, but with little need for extensive database or application monitoring, or advanced analytics, should consider AlienVault."
Gartner, Magic Quadrant for SIEM, Dec 2018
- SIEM - security information event and management.
- USM - unified security management.
- Log Management - an approach, technology and/or method for dealing with very large volumes of data and events.