"/>

- The PAe CCN-CERT offers two alternatives to Public Administration with two systems for incident management or SIEM
accesskey _ mod _ content

The CCN-CERT offers two alternatives to Public Administration with two systems for incident management or SIEM

05 may 2020

The CCN-CERT made available to the AAPP solutions MÓNICA glory and, in order to improve and increase the capacity of identification and management of threats.

The Centre National Cryptologic (CCN) has released a new abstract ‘ Management systems and Information security Events (SIEM) of the ecosystem CCN-CERT (Opens in new window) ’ in detailing the two solutions SIEM included in the set of tools. CERT Gubernamental Nacional for the management of incidents in the Public Administrations is. GLORIA developed by the CCN-CERT and S2 The group and used in all the services of early warning systems ( SAT ) and MÓNICA developed by ICA, capable of improving and strengthening the capacity of identification and management of threats that increase their risk and require immediate attention before they reach constitute a serious incident of impact.

With both SIEM, each with their particular characteristics, professionals of cyber security have an effective method to automate its processes and centralizing the management of the security council in a way that will help to simplify the difficult task of protecting the information which is controlled and the service provided. For this reason, the CCN-CERT offers national solutions GLORIA and MÓNICA as two independent alternatives that can be used by the AAPP without require cost of licensing. Both solutions meet the needs of such centres through its different features:

  • GLORIA(Abre en nueva ventana) : platform for incident management and cyber security threats, which uses complex correlation of events or analysis of patterns for the identification of anomalies, integrating with alternative solutions to the CCN ( CARMEN , CLAUDIA , MicroCLAUDIA ). Based in SIEM, allows a very flexible orientation towards monitoring of world IP (IT/OT), facilitates the work of threat hunting and allows automatic response to incidents ( SOAR ), maximizing the efficiency of the analyst team. It is the solution used by the CCN-CERT for the operation of its early warning service ( SAT ).
  • MÓNICA(Abre en nueva ventana) : automated system for information management and security events. Allows data information existing lakes in or benefit forensic their forensic capacity of its own and manage cases of use through his motor correlation in real time. It also has the capacity of prosecution in origin, which allows you to be independent of the availability or otherwise, of the event log ( logs ) to give an immediate response.

Original source of news (Opens in new window)

  • Security
Subscribe to the youtube channel of OBSAE
 
Subscribe to the youtube channel of OBSAE