Story image

ManageEngine prepped for Aussie breach reporting law

20 Feb 18

ManageEngine, the real-time IT management company, has announced that it has enhanced Log360, its security information and event management (SIEM) solution, to fit the Australian Privacy Act’s requirements for mandatory breach reporting.

With updates to its event correlation engine, predefined reports, and alert profiles, Log360 helps enterprises implement mitigation strategies prescribed by the Australian Signals Directorate (ASD) and comply with the Notifiable Data Breaches scheme.

"Threats have advanced faster than security defence mechanisms, making it virtually impossible to prevent attacks,” says ManageEngine director of product management Manikandan Thangaraj.

“It's time for enterprises to focus on strengthening their incident detection and response capabilities to mitigate breaches when they do occur. We've been enhancing our security auditing capabilities over the last 12 months to help security teams quickly detect data breaches and create an accountable incident resolution and reporting process."

In preparation for the new Privacy Act requirements coming later this month, Log360 has been adding more security use cases to its event correlation engine to help enterprises notify the appropriate individuals when a data breach occurs.

Log360 has also enhanced its predefined reports and alert profiles with support for new vendors including Barracuda, Sophos, and WatchGuard.

Together, these enhancements enable security teams to implement measures for detecting and responding to cybersecurity incidents, as prescribed by the ASD.

The following Log360 features help Australian enterprises comply with the Privacy Act and implement the ASD's recommendations:

Event correlation and alerting - The recently enhanced event correlation engine includes predefined rules to help security teams detect and defeat complex attacks, including updated rules for detecting suspicious SQL backups and unauthorised installation of services and software.

Threat intelligence - Detect malicious traffic with Log360's threat intelligence features, including a built-in STIX/TAXII feed processor and a global IP threat database.

In-depth log collection and auditing - Predefined reports, including new vendor-specific reports, give administrators complete visibility into their security framework. Collect and audit log data from workstations, servers, domain controllers, databases, web servers, files/folders, firewalls, routers, switches, and security solutions to ensure tight network security.

Streamlined incident management - Integrate Log360 with ticketing tools like ManageEngine ServiceDesk Plus and ServiceNow. Generate a ticket for every security alert and automatically assign it to an administrator to ensure efficient and accountable incident resolution.

Log search and forensics - Leverage the log engine to backtrack enterprise breaches and file a detailed incident report to the authorities.

Disruption in the supply chain: Why IT resilience is a collective responsibility
"A truly resilient organisation will invest in building strong relationships while the sun shines so they can draw on goodwill when it rains."
The disaster recovery-as-a-service market is on the rise
As time progresses and advanced technologies are implemented, the demand for disaster recovery-as-a-service is also expected to increase.
Cohesity signs new reseller and cloud service provider in Australia
NEXION Networks has been appointed as an authorised reseller of Cohesity’s range of solutions for secondary data.
The key to financial institutions’ path to digital dominance
By 2020, about 1.7 megabytes a second of new information will be created for every human being on the planet.
Proofpoint launches feature to identify most targeted users
“One of the largest security industry misconceptions is that most cyberattacks target top executives and management.”
What disaster recovery will look like in 2019
“With nearly half of all businesses experiencing an unrecoverable data event in the last three years, current backup solutions are no longer fit for purpose."
NVIDIA sets records with their enterprise AI
The new MLPerf benchmark suite measures a wide range of deep learning workloads, aiming to serve as the industry’s first objective AI benchmark suite.
McAfee named Leader in Magic Quadrant an eighth time
The company has been once again named as a Leader in the Gartner Magic Quadrant for Security Information and Event Management.