e3f57336_mpliance_Software___AlienVault__of_Unified_Security_Management
[NERC CIP Requirement] Cyber Security – Security Management Controls [AlienVault USM Capabilities] Asset Discovery and Inventory Vulnerability Assessment Network Intrusion Detection (IDS) Host Intrusion Detection (HIDS) File Integrity Monitoring (FIM) SIEM / event correlation Log Management Behavioral Monitoring
AlienVault USM provides continuous capture and real-time monitoring of a broad range of data, including: events/ logs; configuration data; asset data; vulnerability data; and network flow data Built-in Host IDS can be implemented on systems with highly sensitive data to ensure data integrity, availability and confidentiality File Integrity Monitoring alerts on changes to critical files which could signal a threat Built-in intrusion detection, behavioral monitoring and event correlation signals information leakage and other attacks in progress—for example, unauthorized access followed by privilege escalation and then additional security exposures such as sensitive data access Centralized, role-based access control for audit trails and event logs preserves “chain-of-custody” for data forensics and investigations.
NERC CIP Compliance Software | AlienVault
Benefits of Unified Security Management