Security Monitoring Design and Build Services

Security information and event management (SIEM) and log management technologies have enormous potential to significantly increase the efficiency of the IT security team, facilitate compliance reporting and auditing, and enable real-time security monitoring of not just the IT infrastructure, but the business itself — the application-, service-, and transaction-layer activities that drive revenue or enable other critical aspects of the organization’s mission.

But reports show that only 20% of SIEM and log management users are achieving measurable benefits! Accelerated by Fulcrum Framework™, Vigilant’s vendor-agnostic lifecycle services for SIEM advance you on the SIEM Maturity Curve and ensure that you meet -- and far exceed – your investment expectations, delivering value not only to security operations, but directly to business decision-makers and risk managers.

Security Information and Event Management (SIEM) Project Planning

For customers newly implementing SIEM or log management technologies, project planning services provide guidance to ensure rapid and lasting value from their investments. The project starts with an understanding of the organization's requirements at the programmatic level, and delivers a detailed, phased roadmap to ensure an efficient, high-value rollout that meets and exceeds corporate objectives. Projects may include RFP management, product selection, staff model, resource planning, and alignment with existing corporate processes and standards.

SIEM Assessment

This project assesses the performance of an existing SIEM program against the organization's requirements and business objectives, and identifies opportunities to quickly unlock additional value. SIEM assessments look at the capability to produce relevant, actionable, real-time alerts; capability to respond to alerts in line with corporate incident handling and escalation guidelines; capability to produce business-relevant metrics and upstream reports; capability to develop new SIEM use cases as business needs evolve; and capability to operate and maintain healthy a functioning SIEM system infrastructure.

SIEM Build Services

Through iterative mini-project cycles, SIEM Build Services deliver incremental benefits of SIEM, and cumulatively assist you in building a fully mature security monitoring program. Conducted in accordance with proven best practices embodied in Fulcrum Framework, the goal of a typical “build cycle” is to extend monitoring capabilities to specific business units, business services or applications, or IT device types. The build cycle includes use case requirements analysis; design and engineering, set-up of required SIEM component systems; integration of new of data sources; and implementation of relevant SIEM correlation rules, filters, dashboards, alerts and queries.

SIEM Operational Support Services

For customers who need to augment in-house resources with SIEM experts, we provide on-site staffing of one or more of the core functions of an organization's SIEM Program, including Level 1 SIEM Support Operations, Architecture/Infrastructure, Content Development, and SIEM Program Management.