Story image

ManageEngine prepped for Aussie breach reporting law

20 Feb 18

ManageEngine, the real-time IT management company, has announced that it has enhanced Log360, its security information and event management (SIEM) solution, to fit the Australian Privacy Act’s requirements for mandatory breach reporting.

With updates to its event correlation engine, predefined reports, and alert profiles, Log360 helps enterprises implement mitigation strategies prescribed by the Australian Signals Directorate (ASD) and comply with the Notifiable Data Breaches scheme.

"Threats have advanced faster than security defence mechanisms, making it virtually impossible to prevent attacks,” says ManageEngine director of product management Manikandan Thangaraj.

“It's time for enterprises to focus on strengthening their incident detection and response capabilities to mitigate breaches when they do occur. We've been enhancing our security auditing capabilities over the last 12 months to help security teams quickly detect data breaches and create an accountable incident resolution and reporting process."

In preparation for the new Privacy Act requirements coming later this month, Log360 has been adding more security use cases to its event correlation engine to help enterprises notify the appropriate individuals when a data breach occurs.

Log360 has also enhanced its predefined reports and alert profiles with support for new vendors including Barracuda, Sophos, and WatchGuard.

Together, these enhancements enable security teams to implement measures for detecting and responding to cybersecurity incidents, as prescribed by the ASD.

The following Log360 features help Australian enterprises comply with the Privacy Act and implement the ASD's recommendations:

Event correlation and alerting - The recently enhanced event correlation engine includes predefined rules to help security teams detect and defeat complex attacks, including updated rules for detecting suspicious SQL backups and unauthorised installation of services and software.

Threat intelligence - Detect malicious traffic with Log360's threat intelligence features, including a built-in STIX/TAXII feed processor and a global IP threat database.

In-depth log collection and auditing - Predefined reports, including new vendor-specific reports, give administrators complete visibility into their security framework. Collect and audit log data from workstations, servers, domain controllers, databases, web servers, files/folders, firewalls, routers, switches, and security solutions to ensure tight network security.

Streamlined incident management - Integrate Log360 with ticketing tools like ManageEngine ServiceDesk Plus and ServiceNow. Generate a ticket for every security alert and automatically assign it to an administrator to ensure efficient and accountable incident resolution.

Log search and forensics - Leverage the log engine to backtrack enterprise breaches and file a detailed incident report to the authorities.

AWS awarded protected level certification by the ACSC
“Cloud technology is in huge demand, and in line with that, the ACSC is also evolving its programs to continue lifting cybersecurity standards across the whole Australian economy."
Why the optical transport equipment market is on the rise
The cumulative spend on optical transport equipment during the next five years is projected to grow by 16%.
Tongan fibre-optic cable outage relieved by satellite
Recently Tonga suffered an outage in the submarine cable network that connects the island nation to the outside world.
IoT: Productivity boost or Pandora’s Box of security issues?
Organisations have begun using IoT to track assets, improve efficiency, boost customer service and gain greater insight into their operations.
Can you spot the phish? Google's quiz puts you to the test
The quiz may not be as clear-cut as you think - but that's exactly why you should do it.
FalconStor announces AWS integration
"While competitors provide narrower proprietary or niche solutions, FalconStor thinks differently about data storage."
2019 network predictions for service providers
There are a number of key events set to impact the IT industry this year – but 5G won’t be one of them.
Veeam expands cloud data management capabilities for IBM, AWS and Azure
The new capabilities supposedly deliver cost-effective data retention, easy cloud migration and data mobility.