Many organizations are looking to Security Event Management (SEM) technology to protect their corporate assets and streamline IT operations, mainly to address the issues involved in managing security infrastructure point solutions, such as firewalls, VPNs, anti-virus systems, and intrusion detection and prevention solutions. Beyond technology installation however, deploying a SEM involves an overall operational challenge that cannot be ignored, including:

• Around-the-clock management – hackers around the world look to exploit vulnerabilities on a 7x24 basis, so SEM operations must be positioned accordingly
• Setting up correlation rules
• Tuning the SEM to the organization's operational constraints
• Training security analysts
• Developing necessary security policies, processes, and procedures

With Cybertrust's Managed SEM solution, Cybertrust's Managed Security Service subject matter experts handle all operational issues on behalf of our customer. Our MSS operations team manages the SEM tool, adding or modifying correlation rules in the SEM correlation engine, and we use tools to analyze security incidents generated by the SEM tool.

With Managed SEM, Cybertrust:

• Monitors and manages the SEM on a 24x7 basis to filter out all IT security threats, ensuring operational security regardless of the customer's business hours or staffing profile
• Troubleshoots issues with security devices
• Manages SEM technology upgrades, patches, and signature updates
• Manages the security policies and rule-sets on the SEM through use of a formal change management process
• Monitors the availability and health of the customer's systems
• Communicates monitoring, management, and reporting information to the customer via the Cybertrust Security Dashboard
• Leverages the customer's already-installed SEM technology or employs that of one our partners

Back to main Managed Security page