Perimeter Security Intelligence

Perimeter Security Intelligence

Perimeter Security Intelligence is a customized global service that helps maintain the confidentiality, integrity, and availability of your network by providing superior network transparency. By gathering and analyzing network and system security data in real-time, you're able to immediately detect and respond to perimeter security threats, effectively reducing the window of exposure and minimizing adverse impacts.

Perimeter Security Intelligence advantages:

  • Identify and eliminate threats before they are exploited
  • Minimize the impact of adverse events that do occur
  • Achieve situational awareness of current threats
  • Automate manual reporting processes
  • Expedite remediation and incident response times
  • Continually measure the effectiveness of security processes
  • Automate the monitoring and enforcement of security controls
  • Fully integrate people, process, and technology into the life cycle of security events

Uncover Actionable Events

ArcSight Global Services leads the way in helping companies understand security threats and how to accurately identify them. We optimize your ability to effectively distill actionable events from millions of meaningless events and from dozens of types of devices by knowing what to look for and where to look for it.

ArcSight Global Services provides a comprehensive library of perimeter security use cases and corresponding content to ensure that your security monitoring program accurately identifies actionable events.

The Importance of Workflow

This triage matrix covers virtually all potential cyber security issues that your business may encounter. Perimeter Security Intelligence, when paired with Security Incident and Event Manager (SIEM), enables you to determine which action to take–callout, investigation, ticket, or additional monitoring. By overlaying ArcSight processes and procedures on the SIEM, you can determine what to do with the events and in what timeframe. This procedural workflow is critical in determining which standard actions to take.


Establishing the Right Skills

Proper training is an ongoing process that is essential to both the short- and long-term success of any security operation. ArcSight Global Services approaches training holistically, addressing roles and responsibilities, processes and procedures, and appropriate ArcSight technologies. Security teams must be presented with a career progression that is both viable and attainable to avoid the loss of key resources. The use of staffing models will also help you develop the right team skills at the right time.

Processes and Procedures

ArcSight Global Services processes and procedures are comprised of four categories, which address a total of 14 processes and 36 underlining procedures. This framework ensures that there is a consistent means by which events are identified, analyzed, and escalated, and that your operations continue to mature as your business requirements evolve.

Advisory, Performance, and Managed Services

ArcSight Global Services provides an ideal mix of services based on your budget, business requirements, and desire to maximize the value of your ArcSight Solution.

  • Advisory Services: Architecture and Design, Operations Primer, Maturity Assessment, Analyst Training, Operations Advisor
  • Performance Services: JumpStart and Implementation, Upgrades and Tuning, Health Checks, Content Design, FlexConnector Development
  • Managed Services: Security Operations, Perimeter Security Monitoring, Insider Threat Monitoring, Compliance Reporting, Universal Log Management, Advanced Persistent Threat Monitoring, Data Leakage, Privacy Breach Detection

Project Phases and Solution Levels

Project phases and solution levels for implementing Perimeter Security Intelligence focus on all aspects of your company's people, processes, and technology to create a definitive roadmap that is unique to your business environment. Phases can be implemented individually or in combination based on your business needs–reporting only, alerting (virtual Security Operations Center), or real-time monitoring and analysis (full Security Operations Center).