HP ArcSight ESM (Enterprise Security Manager)
Security Information Event Management (SIEM) solution
HP ArcSight ESM analyses and correlates every event that occurs across the organisation – every login, logoff, file access, database query, etc. – to deliver accurate prioritisation of security risks and compliance violations.
HP ArcSight ESM is uniquely able to understand who is on the network, what data they are seeing, which actions they are taking with that data, and how that affects business risk.
• User and role data structures to model and monitor user activity across systems and applications
• Custom domain extensions to manage any information e.g. monetary constructs, transactions, ERP data
• Web Services API to enable intelligent reporting and automation from any client application
• Behavior-based pattern detection to identify advanced persistent threats (APTs)
• Regulatory compliance readiness for government and industry audits
WATCH THE VIDEO!
Case Study - HP ArcSight helps BMW drastically decrease incident response times