SIEM solutions: what are they and should businesses in Devon and Cornwall be using them?

December 7, 2021

SIEM solutions for businesses in Devon, Cornwall and Somerset - header image

Despite their very un-user-friendly name, SIEM solutions are an extremely powerful tool for any organisation looking to improve its security. Because of this, we are seeing increasing interest across Devon, Cornwall and Somerset.

In this article, we will explain what a SIEM solution is and, in practical terms, describe the positive impact it can have on an organisation and its security.

What is a SIEM solution?

  • SIEM stands for Security Information and Event Management. In practice, a SIEM solution is a logging and monitoring system. It’s used to log security data and generate reports for compliance purposes. This means that rather than having a multitude of logs generating data across your network and devices, this data can be amalgamated in one place. The SIEM solution. From just one dashboard, you can see whatever you need to see, both in real time and historically.
  • This significantly enhanced visibility means an organisation can better manage company assets. It also helps with identifying and addressing issues before they become significant risks. Additionally, if the worst happens and a breach is detected, a SIEM solution means an organisation can undertake effective forensics to understand the extent of the breach and how it happened.

Who are SIEM solutions for?

SIEM solutions were traditionally only viable for large government or enterprise organisations, but that is no longer the case. Innovation and product development means highly effective SIEM solutions (such as Securious’s own Monikal product) are now a very cost-effective option for smaller and mid-range organisations where cyber security and compliance are a priority.

Across Cornwall, Devon and Somerset, we are seeing increased interest from a variety of organisations. This includes those in education, SaaS, professional services and many more. Typically these companies and organisations recognise that only a SIEM solution will give them the visibility they need to be compliant and keep their data and systems secure. However, the precise reasons are unique in each case.

In addition, SIEM solutions are extremely important for businesses and organisations with fragmented environments. They can also be important for those with some (or all) of their team members working remotely.

How does a SIEM solution work?

  • A SIEM solution uses ‘agents’ to collect data from your network and devices. They make it meaningful and visible from a central dashboard.
  • In order to get started, the initial stage is to define the scope. This just means the key systems you wish to have monitored. They might be on-premise, cloud-based or both.
    Then collection agents will be configured in a variety of sources in your environment – such as devices, servers and firewalls – which collect log data.
  • Once set up, it will start learning your environment and establishing a baseline, so it knows what ‘normal’ looks like. It then continuously monitors your environment, collecting and storing all logs and alerting you to any unusual activity.
  • Finally, a SIEM solution can provide the reporting you need for a variety of compliance standards, such as PCI DSS, ISO 27001 and Cyber Essentials Plus.

Is a SIEM solution software or a service?

This can be confusing, but in essence, a SIEM solution is a software product. However, using it to monitor abnormal behaviour and investigate issues is a service that can either be handled by an internal team or an external provider (or a combination of both). Such functionality is normally referred to as a SOC – a Security Operations Centre.

Let’s look at it another way. Let’s say a SIEM is like having CCTV for everything digital in your organisation. In which case, a managed SOC (security operations centre) threat detection and response service is like having a team of security guards watching over it in real-time, and responding to issues as they arise.

Should I be considering a SIEM solution?

  • We may be biased, because we offer a SIEM solution to clients, but that’s precisely because we believe effective cyber security is impossible if you can’t see the issues you are facing. Without a SIEM solution, you are effectively blind-folded.
  • So the answer, if data security is important, if compliance is a requirement, or if you have a fragmented workforce is almost certainly yes. Adding a SIEM solution can be the single most cost-effective enhancement an organisation can make. As long as you find a solution that is consistent with your scale and requirements.
  • But don’t take our word for it. Good SIEM solution providers (such as Monikal) will allow you to see the SIEM in action in your own environment. In our experience, once you have seen the enhanced visibility it brings, you are unlikely to be happy turning it off again.

How much do SIEM solutions cost?

Traditionally, SIEM solutions have required significant investment – often costing tens of thousands of pounds a month. But that is no longer the case.

For example, in the case of Monikal, our SIEM solution designed especially for mid-level organisations, costs start at just £895 (+ vat) a month.

When you consider how much time it will save with, for example, compliance work, it is likely to pay for itself many times over.

I’m interested, where do I learn more?

There are a number of highly regarded SIEM solutions on the market. These include:

If you are interested in a SIEM solution that has world-class capabilities but is designed especially for smaller and mid-level organisations, you might be interested in our SIEM solution – Monikal.

We are based in Exeter so we are also perfectly located for businesses and organisations in Cornwall, Devon and Somerset who are looking for a SIEM solution.

You are welcome to arrange a visit to see our SIEM HQ at the Exeter Science Park

Tell me more about Monikal?

At Securious, we have been convinced for years that effective cyber security needs visibility and that, in turn, means a SIEM solution. However, the traditional offerings have not been suitable for (or affordable by) the kinds of ambitious, growing businesses we work with.

Recognising this, we have worked with UK-based technical experts Assuria to create Monikal. Monikal is a SIEM especially for smaller and mid-level organisations and ideal for those who are, like us, based in the South West.

In essence, Monikal helps mid-level organisations protect critical information to reduce the financial, reputational and operational impact of data breach.

Through a single dashboard, it provides increased visibility of technology and networks. It highlights any vulnerabilities and enables a proactive response to threats and abnormalities.

Specifically, Monikal offers:

  • Ability to detect and respond to cyber threats
  • Increased resilience to external and internal threats
  • Identification of criminal or negligent behaviours
  • Insight and intelligence about user behaviours
  • Full recording of all network activities
  • Regular cost-efficient vulnerability scanning
  • Monitoring and reporting in line with all PCI DSS Requirements
  • Reports on the 5 security controls required for Cyber Essentials Plus
  • Forensic capabilities in the event of an incident

Monikal is available from £895 (+ vat) a month. We are happy to offer a proof of concept trial in your own environment so you can see it at work.

If you would like to learn more, visit the Monikal website, call us on +44 (0) 1392 247 110 or email info@securious.co.uk