e3f57336_mpliance_Software___AlienVault__of_Unified_Security_Management
[NERC CIP Requirement] Cyber Security – Information Protection [AlienVault USM Capabilities] Asset Discovery & Inventory Vulnerability Assessment Network Intrusion Detection (NIDS) Host Intrusion Detection (HIDS) File Integrity Monitoring (FIM) SIEM / event correlation Behavioral Monitoring Log Management Executive dashboards and reports
Built-in, automated vulnerability assessment identifies the use of weak and default passwords Built-in Host intrusion detection (HIDS) and File Integrity Monitoring will signal when password files and other critical system files have been modified Unified event correlation connects critical, yet related events across systems such as a password change followed by exfiltration of data from the same device Built-in network flow (NetFlow) analysis monitors network traffic and protocols to identify anomalous activity and policy violations Event correlation rules provide the situational awareness needed to identify potential data exfiltration Centralized, role-based access control for audit trails and event logs preserves “chain-of-custody” for data forensics and investigations
NERC CIP Compliance Software | AlienVault
Benefits of Unified Security Management