 |
assuriaONLINE Customer and Partner resources Logon / register
Assuria Log Manager and compliance
Organisations of all sizes and in both the
public and private sector are increasingly required to be in compliance
with an increasing number of legislative and industry regulations and
standards.
These regulations and standards are driving
organisations to seek tools to assist and automate their log management
and compliance processes as part of the overall information assurance /
security management system.
Assuria Log Manager (ALM) helps organisations
achieve compliance to legislative and industry regulations and
standards, these include:
-
ISO 27001
-
Payment Card Industry Data Security Standard PCI DSS.
-
UK Government Codes of Connection including GCSX CoCo.
-
UK CESG Good Practice Guide No. 13 Protective Monitoring GPG-13.
-
US Health regulations HIPAA and HiTech.
Most legislative and industry regulations
and standards include a requirement for the secure collection,
transmission, storage and reporting of audit logs as part of an overall
security management process.
Key features of ALM relevant to standards
and regulation compliance include:
Enterprise wide log collection. Secure and forensically sound collection of original logs into a central secure store. Agent based collection ensures the Security, Continuity and Integrity of all collected logs.
Digitally signed and time-stamped. Each collected log is time-stamped A SHA256 checksum is calculated and the log digitally signed before transfer. The transfer of logs over the network is encrypted using TLS.
Real-time alerts. Configurable to specific log events, sent via SNMP or configurable to other tools.
Forensic readiness. Centrally stored, with all of the handling of the logs preserving the original format so that forensically sound data is available for investigation when required.
Secure storage and Archive. Log cataloguing, chain of custody records, archive creation and management. Archive to secure long terms storage, complete with a digitally-signed manifest.
Reporting. Pre-packages reports for standards combined with flexible analysis, correlation, aggregation and reporting in HTML or PDF. A number of standard reports are provided plus an easy to use custom report generator.
Log data Inspection: Very fast unstructured querying of indexed collected log data.
Console. Assuria Log Manager Console provides Role based access to all agent control and the management of collected logs along with facilities to run queries, generate and print reports.
Virtual operation. Operates and is fully supported in a virtualised environment
Please contact Assuria for information
about how ALM can help your organisation achieve compliance with
specific regulations or standards.
Assuria Log Manager Architecture and components
|
|||
|
