Security Information Management

Evercom Networks can offer significant insight into the management of audit and event logs across the breadth of enterprise systems, from network device to mainframe.

We understand that audit log projects can be driven by a number of factors:

• Forensics and log retention
• Audit visibility and reporting
• Operational and incident response requirements
• Detection of employee fraud or misuse
• Requirements for PCI, 27001, ACSI 33 reporting, or requirements from prudential or regulatory auditors
  

Evercom offer a number of solutions for addressing the objectives above. We also understand that vendors are confusing in their use of terminology and acronyms and that mining the true security value from vendor logs is imperative. The ArcSight solution thrives on complexity, and can trivialise the implementation issues that plague other approaches. Our experience has led to insights and best practices that cut huge numbers of man hours from repetitive audit tasks. We offer:

• Automated, low impact solutions for z/OS mainframe and DB2
• Database auditing that does not impact performance
• Techniques to structure network and security operations for maximum benefit
• Log retention systems that ensure evidentiary forensics strength
• Demystification of Active Directory event trails
• Techniques to plan and scope enterprise wide log review
• Techniques to address multiple, partially overlapping reporting requirements
• How to use correlation to drive the return on investment
  

ArcSight is the premium platform for structuring enterprise security operations and providing the audit visibility to cut costs. ArcSight mines business meaning from millions of event logs by analysing events through a matrix of regulatory and policy related frameworks. The efficiencies derived from real-time awareness and the simplicity of compliance reporting gives ArcSight the strongest ROI in the market.