Security events you can see and act on.
We install and configure security information and event management (SIEM), connect log sources and set up the first correlation rules.
- Duration
- 3–6 weeks for an initial setup
- Delivery
- On site or remote
- Deliverables
- SEC-07
Signs you need this
- Security events are scattered across systems with no single view.
- Nobody knows which log sources matter most.
- Important events do not trigger any alert.
Scope of work
SIEM installation and initial configuration
Deployment of the SIEM platform and its initial configuration.
Log source connection
Connecting servers, network devices and applications as log sources.
Correlation rules
Basic event correlation rules for priority security scenarios.
One place to see what is happening across your systems.
Deliverables
SEC-07
Configured SIEM with connected log sources
Security events from your systems in one place.
SEC-07
Basic correlation rules
The events that matter trigger an alert.
SEC-07
Documentation for your security team
How the setup works and how to extend it.
Before you ask
Do you run a 24/7 security operations centre?
No. We set up and configure SIEM; ongoing monitoring is done by your team or your chosen provider.
Can you work with our existing SIEM?
Yes, including reconfiguration and adding log sources.
Want to see security events across your systems?
Tell us about your situation. Your enquiry goes straight to the specialist who would do the work.