CINXE.COM

<!DOCTYPE html>     <html class="no-js" lang="en-GB"> <head><script type="text/javascript" src="https://web-static.archive.org/_static/js/bundle-playback.js?v=7YQSqjSh" charset="utf-8"></script> <script type="text/javascript" src="https://web-static.archive.org/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="https://web-static.archive.org/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("http://web.archive.org/web"); __wm.wombat("https://www.jisc.ac.uk/managed-siem","20220817111826","http://web.archive.org/","web","https://web-static.archive.org/_static/", "1660735106"); </script> <link rel="stylesheet" type="text/css" href="https://web-static.archive.org/_static/css/banner-styles.css?v=p7PEIJWi" /> <link rel="stylesheet" type="text/css" href="https://web-static.archive.org/_static/css/iconochive.css?v=3PDvdIFv" />  <title>Managed SIEM | Jisc</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <script type="text/javascript">var jiscp = {"joid":"-1","name":"","sector":"","region":""};</script> <link rel="preconnect" href="//web.archive.org/web/20220817111826/https://cdn-eu.dynamicyield.com/"> <link rel="preconnect" href="//web.archive.org/web/20220817111826/https://st-eu.dynamicyield.com/"> <link rel="preconnect" href="//web.archive.org/web/20220817111826/https://rcom-eu.dynamicyield.com/"> <link rel="dns-prefetch" href="//web.archive.org/web/20220817111826/https://cdn-eu.dynamicyield.com/"> <link rel="dns-prefetch" href="//web.archive.org/web/20220817111826/https://st-eu.dynamicyield.com/"> <link rel="dns-prefetch" href="//web.archive.org/web/20220817111826/https://rcom-eu.dynamicyield.com/"> <script> var cookiestring = new RegExp("jisc_eprivacy" + '[^;]+').exec(document.cookie); var value = unescape(!!cookiestring ? cookiestring.toString().replace(/^[^=]+/, '').replace('=', '') : ''); if(value === "active-consent") { var script1 = document.createElement('script'); var script2 = document.createElement('script'); script1.src = "//web.archive.org/web/20220817111826/https://cdn-eu.dynamicyield.com/api/9877327/api_dynamic.js"; script2.src = "//web.archive.org/web/20220817111826/https://cdn-eu.dynamicyield.com/api/9877327/api_static.js"; document.getElementsByTagName('head')[0].appendChild(script1); document.getElementsByTagName('head')[0].appendChild(script2); } </script><script> var cookiestring = new RegExp("jisc_eprivacy" + '[^;]+').exec(document.cookie); var value = unescape(!!cookiestring ? cookiestring.toString().replace(/^[^=]+/, '').replace('=', '') : ''); if(value === "active-consent") { (function(h,o,t,j,a,r){ h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)}; h._hjSettings={hjid:2326029,hjsv:6}; a=o.getElementsByTagName('head')[0]; r=o.createElement('script');r.async=1; r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv; a.appendChild(r); })(window,document,'http://web.archive.org/web/20220817111826/https://static.hotjar.com/c/hotjar-','.js?sv='); } </script>  <script> var cookiestring = new RegExp("jisc_eprivacy" + '[^;]+').exec(document.cookie); var value = unescape(!!cookiestring ? cookiestring.toString().replace(/^[^=]+/, '').replace('=', '') : ''); if(value === "active-consent") { (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'http://web.archive.org/web/20220817111826/https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-PWX6FN'); } </script>   <noscript><iframe src="http://web.archive.org/web/20220817111826if_/https://www.googletagmanager.com/ns.html?id=GTM-PWX6FN" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <link rel="shortcut icon" href="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/favicon.ico"/> <meta name="description" content="A security information and event management (SIEM) service to help you monitor your systems and respond quickly to security issues."/> <link rel="canonical" href="http://web.archive.org/web/20220817111826/https://www.jisc.ac.uk/managed-siem"/> <link rel="shortlink" href="http://web.archive.org/web/20220817111826/https://www.jisc.ac.uk/node/56209"/> <meta property="og:site_name" content="Jisc"/> <meta property="og:type" content="product"/> <meta property="og:url" content="http://web.archive.org/web/20220817111826/https://www.jisc.ac.uk/managed-siem"/> <meta property="og:title" content="Managed SIEM"/> <meta property="og:description" content="A security information and event management (SIEM) service to help you monitor your systems and respond quickly to security issues."/> <meta name="twitter:card" content="summary_large_image"/> <meta name="twitter:site" content="@jisc"/> <meta name="twitter:url" content="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/managed-siem"/> <meta name="twitter:title" content="Managed SIEM"/> <meta name="twitter:description" content="A security information and event management (SIEM) service to help you monitor your systems and respond quickly to security issues."/> <meta name="twitter:image" content="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/default/files/managed-siem-service-banner.png"/> <link rel="alternate" type="application/rss+xml" title="Jisc blog feed" href="http://web.archive.org/web/20220817111826/https://feeds.feedburner.com/JISCBlog"/> <link rel="alternate" type="application/rss+xml" title="Jisc news feed" href="http://web.archive.org/web/20220817111826/https://feeds2.feedburner.com/ac/uabG"/> <link rel="alternate" type="application/rss+xml" title="Jisc events feed" href="http://web.archive.org/web/20220817111826/https://feeds2.feedburner.com/ac/toXU"/> <link rel="alternate" type="application/rss+xml" title="Jisc jobs feed" href="http://web.archive.org/web/20220817111826/https://feeds.feedburner.com/JiscJobVacanciesWebFeed"/> <link rel="alternate" type="application/rss+xml" title="Jisc podcasts feed" href="http://web.archive.org/web/20220817111826/https://feeds.feedburner.com/JiscPodcast"/> <link rel="apple-touch-icon" sizes="144x144" href="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-144x144-precomposed.png"> <link rel="apple-touch-icon" sizes="114x114" href="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-114x114-precomposed.png"> <link rel="apple-touch-icon" sizes="57x57" href="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-57x57-precomposed.png"> <link rel="apple-touch-icon" sizes="72x72" href="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-72x72-precomposed.png"> <link rel="apple-touch-icon" href="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon-precomposed.png"> <link rel="apple-touch-icon" href="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/apple-touch-icon.png">  <meta property="fb:pages" content="499379160101212"/> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/> <meta content="width=device-width,initial-scale=1.0" name="viewport"/> <meta content="on" http-equiv="cleartype"/>  <meta name="format-detection" content="telephone=no"/> <meta name="google-site-verification" content="UNqcoVblscrmuOfPyGUTeRMyNRcroUK_U9ghx-PFl0Q"/> <link href="//web.archive.org/web/20220817111826cs_/https://fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,500,500i" rel="stylesheet"> <link rel="stylesheet" href="http://web.archive.org/web/20220817111826cs_/https://www.jisc.ac.uk/sites/default/files/css/css_rEI_5cK_B9hB4So2yZUtr5weuEV3heuAllCDE6XsIkI.css"/> <link rel="stylesheet" href="http://web.archive.org/web/20220817111826cs_/https://www.jisc.ac.uk/sites/default/files/css/css_oBsiHIoIA5lAPqK9E6jDdaNe3tAN5Nagql7giHq9cno.css"/> <link rel="stylesheet" href="http://web.archive.org/web/20220817111826cs_/https://www.jisc.ac.uk/sites/default/files/css/css_PsIMLeNhMOWYLk90AWTJ5AtR6KQeGbR_YScSoC_7uSM.css" media="print"/> <style type="text/css"> .cookie-bar { color: #fff; background-color: #0d224c;} .cookie-bar__confirm2, .cookie-bar__confirm, .cookie-bar__reject { padding: .9rem 1.8rem; color: #0D224E!important; line-height: 1; text-align: center; text-decoration: none!important; background-color: #fff; margin-left: 25px ; margin-left: 2.5rem ; font-size: 18px ; font-size: 1.8rem ; line-height: 22px ; line-height: 2.2rem ; -webkit-border-radius: 3px; -moz-border-radius: 3px; -ms-border-radius: 3px; -o-border-radius: 3px; border-radius: 3px; } .cookie-bar__confirm2:visited, .cookie-bar__confirm:visited, .cookie-bar__reject:visited { color: #0D224E; } @media print { .cookie-bar__reject:visited { color: #0D224E; } } .cookie-bar__confirm2:focus, .cookie-bar__confirm:focus, .cookie-bar__reject:focus { color: #007aaa; background-color: #d9d9d9; outline: 0.3rem solid #fd6; } .cookie-bar__confirm2:hover, .cookie-bar__confirm:hover, .cookie-bar__reject:hover { box-shadow: 0 0.3rem 1.2rem rgba(0, 0, 0, 0.23), 0 0.3rem 1.2rem rgba(0, 0, 0, 0.16); color: #0D224E; background-color: #d9d9d9; transition: all 0.3s cubic-bezier(0.25, 0.8, 0.25, 1); } .cookie-bar__reject:hover { transition: none; } .cookie-bar__reject:active { box-shadow: none; } .cookie-bar__confirm2:focus:hover, .cookie-bar__confirm:focus:hover, .cookie-bar__reject:focus:hover { color: #0D224E; text-decoration: none; background-color:#d9d9d9; outline: 0.3rem solid #fd6; } .cookie-bar__confirm2:active, .cookie-bar__confirm:active, .cookie-bar__reject:active { color: #0D224E; text-decoration: none; background-color: #d9d9d9; outline: 0.3rem solid #fd6; } </style> <script> dataLayer = []; </script> <script src="/web/20220817111826js_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/js/vendor/modernizr.js"></script> <script src="/web/20220817111826js_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/js/vendor/a11y-toggle.min.js"></script>  </head> <body class="jisc not-front no-sidebars node-type-product-service"> <div id="cookie-bar-main" class="cookie-bar" style="display: none;"> <div class="inner"> <p class="cookie-bar__notification">We use cookies to give you the best experience and to help improve our website</p> <p> <a class="cookie-bar__link" href="/web/20220817111826/https://www.jisc.ac.uk/website/cookies">Find out more about how we use cookies</a> </p> <p class="cookie-bar__options-title">Choose whether to use cookies:</p> <p class="cookie-bar__options"> <a href="#" class="cookie-bar__reject">No thanks</a> <a href="#" class="cookie-bar__confirm">Yes, I accept</a> </p> </div> </div> <header class="masthead jsSiteMasthead" role="banner" xmlns="http://www.w3.org/1999/html"> <div class="inner"> <a id="skiplinks" class="visuallyhidden focusable in-page" href="#main"> <span>Skip to main content</span> </a> </div> <div class="c-main-site-header jsMainSiteHeader"> <div class="c-main-site-header__primary-signpost c-main-site-header__primary-signpost--has-nav-items "> <div class="c-main-site-header__container"> <div class="c-main-site-header__primary-signpost-inner"> <p class="c-main-site-header__brand"> <a class="c-main-site-header__brand-link" href="/web/20220817111826/https://www.jisc.ac.uk/" title="Go to the Jisc homepage"> <img class="c-main-site-header__brand-img" src="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/all/themes/jisc_clean/img/jisc-logo.svg" alt="Jisc"/> </a> </p> <nav class="c-main-site-header__you-are-in" aria-label="Breadcrumb"> <p class="c-main-site-header__you-are-in-title">You are in:</p> <ul class="c-main-site-header__you-are-in-list"> <li><a href="/web/20220817111826/https://www.jisc.ac.uk/cyber-security">Cyber security</a></li><li><span>Managed SIEM</span></li> </ul> </nav> <div class="c-main-site-header__utilities"> <p class="c-main-site-header__utilities-title">Utilities:</p> <ul class="c-main-site-header__utilities-list c-main-site-header__utilities-list--menu-triggers"> <li class="c-main-site-header__utilities-item"> <button class="c-main-site-header__trigger c-main-site-header__trigger--enabled jsUtilityTrigger" data-a11y-toggle="a11ytoggle-siteSearchTarget" data-trigger-role="search" aria-label="Search this website"> <div class="c-main-site-header__trigger-search-icon jsFnbMenuIconTrigger" data-icon-role="search"> <span class="c-main-site-header__trigger-search-icon-circle"></span> <span class="c-main-site-header__trigger-search-icon-handle"></span> </div> <span class="c-main-site-header__trigger-copy">Search this website</span> </button> </li> <li class="c-main-site-header__utilities-item"> <button class="c-main-site-header__trigger c-main-site-header__trigger--enabled jsUtilityTrigger" data-a11y-toggle="a11ytoggle-siteMenuTarget" data-trigger-role="navigation" aria-label="Site navigation"> <div class="c-main-site-header__trigger-menu-icon jsFnbMenuIconTrigger" data-icon-role="navigation"> <span class="c-main-site-header__trigger-menu-icon-line"></span> <span class="c-main-site-header__trigger-menu-icon-line"></span> <span class="c-main-site-header__trigger-menu-icon-line"></span> </div> <span class="c-main-site-header__trigger-copy">Site navigation</span> </button> </li> </ul> <ul class="c-main-site-header__utilities-list c-main-site-header__utilities-list--nav-and-site-search"> <li class="c-main-site-header__utilities-item"> <div class="search search--not-front" id="search"> <span class="c-main-site-header__site-search-label-copy">Search the Jisc website</span> <form action="/web/20220817111826/https://www.jisc.ac.uk/search" method="post" id="search-api-page-search-form-search-" accept-charset="UTF-8"> <label class="visuallyhidden" for="search_term"><span class="form-fields__label-text">Search </span></label> <input class="ui-autocomplete-input" placeholder="Search Jisc" id="search_term" autocomplete="off" type="text" name="keys_1" value="" size="30" maxlength="128"/> <input type="hidden" name="id" value="1"/> <a href="#" class="close ico ico-cross">Clear search results</a><input class="ico ico-search-glass" type="submit" id="edit-submit-1" name="op" value="Search"/><input type="hidden" name="form_build_id" value="form-mx5nJKnoCOdQhnTxgiRuBi3mCkZpc_6MNVoaBlU0pWk"/> <input type="hidden" name="form_id" value="search_api_page_search_form_search_"/> </form> <div id="search-results" class="search-results-dropdown"> <p class="search-results__intro"></p> </div> </div> </li> </ul> </div> </div> </div> </div> <div class="c-main-site-header__menu jsMenuTarget" id="a11ytoggle-siteSearchTarget" data-is-small-viewport=""> <div class="c-main-site-header__site-search c-main-site-header__site-search--in-menu" role="search"> <div class="search search--not-front" id="search"> <span class="c-main-site-header__site-search-label-copy">Search the Jisc website</span> <form action="/web/20220817111826/https://www.jisc.ac.uk/search" method="post" id="search-api-page-search-form-search-" accept-charset="UTF-8"> <label class="visuallyhidden" for="search_term"><span class="form-fields__label-text">Search </span></label> <input class="ui-autocomplete-input" placeholder="Search Jisc" id="search_term" autocomplete="off" type="text" name="keys_1" value="" size="30" maxlength="128"/> <input type="hidden" name="id" value="1"/> <a href="#" class="close ico ico-cross">Clear search results</a><input class="ico ico-search-glass" type="submit" id="edit-submit-1" name="op" value="Search"/><input type="hidden" name="form_build_id" value="form-mx5nJKnoCOdQhnTxgiRuBi3mCkZpc_6MNVoaBlU0pWk"/> <input type="hidden" name="form_id" value="search_api_page_search_form_search_"/> </form> <div id="search-results" class="search-results-dropdown"> <p class="search-results__intro"></p> </div> </div> </div> </div> <div class="c-main-site-header__menu jsMenuTarget" id="a11ytoggle-siteMenuTarget" data-is-small-viewport=""> <nav> <div class="c-main-site-header__main-nav jsMainNavHook"> <p class="c-main-site-header__main-nav-title">Navigation:</p> <div class="c-main-site-header__main-nav-secondary jsMainNavSecondaryHook"> <ul class="c-main-site-header__container"><li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/allow-and-deny-lists" class="c-main-site-header__main-nav-link">Allow and deny lists</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/ddos-mitigation" class="c-main-site-header__main-nav-link">Foundation DDoS mitigation</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/critical-services-protection" class="c-main-site-header__main-nav-link">Critical services protection</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/cyber-essentials" class="c-main-site-header__main-nav-link">Cyber Essentials</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/cyber-security-assessment" class="c-main-site-header__main-nav-link">Cyber security assessment</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/cyber-security-financial-x-ray" class="c-main-site-header__main-nav-link">Cyber security financial X-ray</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/csirt" class="c-main-site-header__main-nav-link">CSIRT</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/cyber-threat-intelligence" class="c-main-site-header__main-nav-link">Cyber threat intelligence</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/security-operations-centre" class="c-main-site-header__main-nav-link">Security operations centre</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/email-advice" class="c-main-site-header__main-nav-link">Email advice and testing</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/janet-network-resolver" class="c-main-site-header__main-nav-link">Janet Network resolver</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/network-time-service-ntp" class="c-main-site-header__main-nav-link">Network time service (NTP)</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/managed-firewall" class="c-main-site-header__main-nav-link">Managed firewall</a></li> <li class="c-main-site-header__main-nav-item active-trail"><a href="/web/20220817111826/https://www.jisc.ac.uk/managed-siem" title="" class="c-main-site-header__main-nav-link--current c-main-site-header__main-nav-link active-trail active">Managed SIEM</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/penetration-testing" class="c-main-site-header__main-nav-link">Penetration testing</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/primary-nameserver" title="" class="c-main-site-header__main-nav-link">Primary nameserver service</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/simulated-phishing-and-associated-training" class="c-main-site-header__main-nav-link">Simulated phishing and associated training</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/web-filtering" class="c-main-site-header__main-nav-link">Web filtering and monitoring framework</a></li> <li class="c-main-site-header__main-nav-item"><a href="/web/20220817111826/https://www.jisc.ac.uk/vulnerability-assessment-service-and-tools-supply-framework" class="c-main-site-header__main-nav-link">Vulnerability assessment service</a></li> </ul> </div> </div> </nav> </div> </div> </header> <main id="main" class="jsMainContent" role="main"> <div class="inner l-pull-left featured top-bar"> <div class="l-centre-offset row"> </div> </div> <section class="t-products-and-services"> <div class="inner"><div id="target-space"></div></div>  <div class="inner l-pull-left featured top-bar"> <div class="c-service-gutter__right"> <div class="l-centre-offset">  <header class="service-header service-header--has-banner" itemscope itemtype="http://schema.org/Organization"> <span class="marker marker--page">Service</span> <h1 class="page-title" itemprop="name"> Managed SIEM </h1> <div class="service-logo"> </div> <div class="service-header__banner"> <figure class="media field field-type-image"> <div class="media__inner"> <img typeof="foaf:Image" src="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/default/files/managed-siem-service-banner.png" alt="Consultant talking to colleague"/> <div class="media__attribution"> <div class="media__attribution__title"> <span class="ico ico-i">Creative Commons attribution information</span> </div> <div about="https://www.jisc.ac.uk/sites/default/files/managed-siem-service-banner.png" class="media__attribution__info"> <div xmlns:cc="http://creativecommons.org/ns#" xmlns:dct="http://purl.org/dc/terms/" class="last-child"> <div property="cc:title" class="cc__title"><a property="dct:title" rel="cc:attributionURL" href="http://web.archive.org/web/20220817111826/https://www.gettyimages.co.uk/detail/photo/young-asian-it-consultant-advising-manager-in-royalty-free-image/1044307114">Consultant talking to colleague</a></div><div class="cc__author">©<span property="cc:attributionName">10'000 Hours</span> via <span>Getty Images</span></div><div class="cc_license last-child">All rights reserved</div> </div> </div> </div> </div> </figure> </div> <div class="row"> <div class="col span-6"> <p class="field field-type-text-long service-header__summary l-gutter--right">A security information and event management (SIEM) service to help you monitor your systems and respond quickly to security issues.</p> </div>  <div class="col span-6"> <div class="contact-panel contact-panel--has-callout-top"> <a class="contact-panel__callout contact-panel__callout--top" href="/web/20220817111826/https://www.jisc.ac.uk/contact/your-account-manager"> <em> </em><span itemprop="email">Contact your relationship manager to get started</span> </a> <div class="c-contact-panel__contact-details"> <p class="visuallyhidden">For enquiries contact:</p> <ul> <li class="c-contact-panel__contact-details-item"> <a class="c-contact-panel__contact-details-link" href="http://web.archive.org/web/20220817111826/mailto:managed.siem@jisc.ac.uk" itemprop="email"><i aria-hidden="true" class="fas fa-envelope c-contact-panel__contact-details-link-icon"></i> <span class="c-contact-panel__contact-details-link-text">managed.siem@jisc.ac.uk</span></a> </li> </ul> </div> </div>  </div>  </div>  <div class="row break-contact-panel article-full"> <div class="article-full__body"> <div class="product-service-body col span-9"> <div class="field field-type-text-long"> <h2>About managed SIEM</h2><p>Members <a href="/web/20220817111826/https://www.jisc.ac.uk/reports/cyber-security-posture-survey-results-2019">have told us they want a SIEM</a> to help with proactively managing cyber security threats. Managed SIEM meets this need and removes the difficulties education and research organisations often face when they want to implement, manage and maintain a SIEM solution.</p><p>A SIEM solution makes it easier for an organisation to spot security-related anomalies on their network because it aggregates data from their various systems and turns data logs into actionable insights.</p><p>SIEM solutions are widely used by commercial bodies to safeguard their business and protect their reputation, but education and research organisations can find it hard to commit the necessary resources and staff time.</p><p>Managed SIEM takes data from network infrastructure sources such as firewall logs, domain name system (<span class="lexicon-term has-tooltip" title="domain name system"><abbr title="domain name system">DNS</abbr></span>) records and event logs and aggregates it into a central system via Splunk.</p><h2>Benefits of a managed SIEM service</h2><p>The service is tailored to meet your requirements, adjusting detection thresholds and rules as necessary to separate suspicious activity from business as usual activity. </p><p>Analysts triage any alerts, assessing the threat severity and providing recommendations to you about how to resolve the issue. This reduces your own team’s workload so they can focus on the most significant issues.</p><p>Managed SIEM:</p><ul><li>Is designed to overcome the sector-specific challenges of education and research organisations looking for a SIEM solution</li><li>Frees staff from monitoring your network and analysing SIEM outputs</li><li>Quickly provides clear information on vulnerabilities and threats so you can act fast to protect your systems</li><li>Assists with and demonstrates your organisation’s compliance with sector body requirements on cyber security</li><li>Is a cost-effective alternative to commercial solutions</li></ul><h3>Co-designed with members</h3><p>To develop a service that works for you, Jisc worked with members to identify use cases including:</p><ul><li>Same user logging in from multiple geographical locations at the same time</li><li>Detecting network scanning and beaconing</li><li>Comparing firewall and domain name system (<span class="lexicon-term has-tooltip" title="domain name system"><abbr title="domain name system">DNS</abbr></span>) logs against threat lists</li><li>Detecting unexpected software on your critical infrastructure</li></ul><p>Together, the service was designed around these requirements - this approach has helped create a service that does what you say you need. When you become a service user, you’ll be able to feed into our continuous improvement processes to help us develop the service so it can meet changing needs and adapt to emerging threats.</p><section class="is-collapsible is-collapsible--blue user-created "><h3 class="cx_collapsibles__trigger">Managed SIEM and Splunk</h3><div class="cx_collapsibles__target"><p>As Splunk’s only managed service provider for education and research in the UK, Jisc already offers a cost-effective managed Splunk licence service and we will be providing this service alongside our managed SIEM service agreement.</p><p>The dashboards you’ll see as a managed SIEM service user highlight the most recent findings from the Splunk platform.</p><p>The managed service works in tandem with our <a href="/web/20220817111826/https://www.jisc.ac.uk/cyber-security">portfolio of cyber security services</a> so, where it identifies something that calls for a fast response, our <a href="/web/20220817111826/https://www.jisc.ac.uk/csirt">CSIRT</a> team will triage the incident and contact you with their recommendations. They’ll also support you to resolve it if required.</p></div></section><div class="signpost--highlight article-full__body" style="background: #EEE5EE; border: 2px solid #737;"><h3 style="margin-top: 0px;">Case study: University of Bath</h3><p>The University of Bath has a lot of sensitive data to protect as a <span class="lexicon-term has-tooltip" title="science, technology, engineering and mathematics"><abbr title="science, technology, engineering and mathematics">STEM</abbr></span>-focused, research intensive institution. <a href="http://web.archive.org/web/20220817111826/https://repository.jisc.ac.uk/8125/1/case-study-university-of-bath-managed-siem.pdf">Read about how they helped Jisc pilot the managed SIEM service (pdf)</a>.</p></div><h2>How to get started</h2><p>Tell us your data sources and server types and we’ll arrange a call or meeting to explain the technical setup you need to get data flowing from your network into our Splunk platform.</p><p>Technical onboarding guides can help you complete initial set up, with help available to your technical lead if needed. We know organisations can be put off implementing a SIEM solution by complicated setup processes, so we’re here to support you.</p><p>You'll receive access to the SIEM application through the <a href="http://web.archive.org/web/20220817111826/https://cybersecurity.jisc.ac.uk/">cyber security portal</a>.</p><p><a class="custom-btn xlarge" href="/web/20220817111826/https://www.jisc.ac.uk/contact/your-account-manager">Contact your relationship manager</a></p><section class="is-collapsible is-collapsible--blue user-created "><h3 class="cx_collapsibles__trigger">How to buy</h3><div class="cx_collapsibles__target"><p> <figure class="media media-element media--right file-default"> <div class="media__inner"> <img alt="Crown Commercial Service supplier logo" style="width: 135px; height: 100px;" data-delta="11" typeof="foaf:Image" src="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/default/files/crown-commercial-service-logo-150-colour.png" title=""/> </div> </figure> </p><p>Jisc have been appointed as an approved supplier on the Crown Commercial Services dynamic purchasing system (<span class="lexicon-term has-tooltip" title="dynamic purchasing system"><abbr title="dynamic purchasing system">DPS</abbr></span>). The benefit for our members in purchasing through the <span class="lexicon-term has-tooltip" title="dynamic purchasing system"><abbr title="dynamic purchasing system">DPS</abbr></span> is that it allows public sector buyers to procure an extensive variety of cyber security services from a range of pre-qualified suppliers.</p><p><a href="http://web.archive.org/web/20220817111826/https://www.crowncommercial.gov.uk/agreements/RM3764.3">Visit the Crown Commercial Service (CCS) website for more information</a>. The ‘how to buy’ section gives full details for registering as a buyer and navigating through the process.</p><p>The CCS run regular webinars for customers explaining what and how to buy from the new cyber security <span class="lexicon-term has-tooltip" title="dynamic purchasing system"><abbr title="dynamic purchasing system">DPS</abbr></span>. <a href="http://web.archive.org/web/20220817111826/https://www.eventbrite.co.uk/o/crown-commercial-service-18280709438">See upcoming webinar sessions</a>.</p></div></section><section class="is-collapsible is-collapsible--blue user-created "><h3 class="cx_collapsibles__trigger">Service levels</h3><div class="cx_collapsibles__target"><h4>Hours of service</h4><ul><li>Working hours: 8:00-18:00, Monday to Friday</li><li>On-call hours: 18:00-00:00, Monday to Friday; 09:00-17:00, Saturday to Sunday</li></ul><h4>Service level agreement</h4><table border="1" cellpadding="1" cellspacing="1" style="width: 500px;"><thead><tr><th scope="col">Severity</th><th scope="col">Janet <span class="lexicon-term has-tooltip" title="computer security and incident response team"><abbr title="computer security and incident response team">CSIRT</abbr></span> response</th><th scope="col">Contact method</th><th scope="col">Service level agreement</th></tr></thead><tbody><tr><td>Critical</td><td>Investigation</td><td>Phone call and email</td><td>During working hours: 1 hour response time, one phone call and email.<br/>During on-call hours: 2 hour response time, one phone call and email.</td></tr><tr><td>High</td><td>Investigation</td><td>Email</td><td>During working hours: 1 hour response time<br/>Outside of working hours: automated notification</td></tr><tr><td>Medium</td><td>Incident checked and resolved</td><td>Email</td><td>During working hours: 2 hour response time<br/>Outside of working hours: automated notification</td></tr><tr><td>Low</td><td>None</td><td>Email</td><td>Scheduled report notification</td></tr><tr><td>Info</td><td>None</td><td>Email</td><td>Scheduled report notification</td></tr></tbody></table></div></section><h2>ISO certification</h2><p>This service is included within the scope of our ISO9001 and ISO27001 certificates.</p><p><a href="/web/20220817111826/https://www.jisc.ac.uk/about/certification">Read more about International Organisation for Standardisation (ISO) standards and view Jisc certificates</a>.</p><p> <figure class="media media-element media--left file-default"> <div class="media__inner"> <img alt="ISO9001 with UK National Accreditation" style="font-size: 13.008px;" data-delta="5" typeof="foaf:Image" src="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/default/files/iso_9001ukas.jpg" title=""/> </div> </figure> <figure class="media media-element media--left file-default"> <div class="media__inner"> <img alt="ISO27001 with UKAS" style="font-size: 13.008px;" data-delta="4" typeof="foaf:Image" src="http://web.archive.org/web/20220817111826im_/https://www.jisc.ac.uk/sites/default/files/iso_iec_27001ukas.jpg" title=""/> </div> </figure> </p><p> </p> <style type="text/css"> <![CDATA[/* ><!]]>*/ </style> </div> </div> </div> </div> </header>  </div>  </div>  </div>  <div class="inner l-pull-left"> <div class="l-centre-offset"> <aside class="article-full__related l-gutter--top"> </aside> </div> </div>  </section> </main> <footer role="contentinfo"> <div class="inner l-pull-left light l-gutter--top"> <div class="l-centre-offset row"> </div>  <div class="l-centre-offset row"> </div>  </div> <div class="inner l-pull-left medium"> <div class="l-centre-offset"> <div class="region region--4-up"> </div> </div>  </div>  <div class="c-main-site-footer">  <div class="c-main-site-footer__breadcrumb"> <div class="inner inner--main-site-footer"> <div class="c-main-site-footer-grid"> <div class="c-main-site-footer-grid__item u-6/12@medium u-9/12@large"> <nav class="c-main-site-footer__you-are-here" aria-label="Breadcrumb"> <p class="c-main-site-footer__you-are-here-title">You are in:</p> <div class="c-main-site-footer__you-are-here-item-home"> <a class="c-main-site-footer__you-are-here-link" href="/web/20220817111826/https://www.jisc.ac.uk/" aria-label="Jisc homepage"><i class="fas fa-home" aria-hidden="true"></i></a> </div> <ul> <li><a href="/web/20220817111826/https://www.jisc.ac.uk/cyber-security">Cyber security</a></li><li><span>Managed SIEM</span></li> </ul> </nav> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large">   </div> </div> </div> </div>  <div class="c-main-site-footer__linklist"> <div class="inner inner--main-site-footer"> <div class="c-main-site-footer-grid"> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> <h2 class="c-main-site-footer__linklist-title">Areas</h2> <ul class="c-main-site-footer__linklist-group"><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/connectivity">Connectivity</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/cyber-security">Cyber security</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/cloud">Cloud</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/data-and-analytics">Data analytics</a></li></ul><ul><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/libraries-and-research">Libraries, learning resources and research</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/student-experience">Student experience</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/trust-and-identity">Trust and identity</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/advice">Advice and guidance</a></li></ul> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> <h2 class="c-main-site-footer__linklist-title">Explore</h2> <ul class="c-main-site-footer__linklist-group"><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/guides">Guides</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="http://web.archive.org/web/20220817111826/https://beta.jisc.ac.uk/training">Training</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/consultancy">Consultancy</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="http://web.archive.org/web/20220817111826/https://beta.jisc.ac.uk/events">Events</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/rd">R&D</a></li></ul> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> <h2 class="c-main-site-footer__linklist-title">Useful</h2> <ul class="c-main-site-footer__linklist-group"><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/about">About</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/membership">Membership</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/get-involved">Get involved</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/news">News</a></li><li class="c-main-site-footer__linklist-item"><a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/jobs">Jobs</a></li></ul> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> <h2 class="c-main-site-footer__linklist-title">Get in touch</h2> <ul class="c-main-site-footer__linklist-group"> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/contact"> Contact us </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/headlines"> Sign up to our newsletter </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link-social" href="http://web.archive.org/web/20220817111826/https://twitter.com/jisc"> <i class="fab fa-twitter" aria-hidden="true"></i> <span class="c-main-site-footer__linklist-item-link-social-copy">Twitter</span> </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link-social" href="http://web.archive.org/web/20220817111826/https://www.facebook.com/jiscsocial"> <i class="fab fa-facebook" aria-hidden="true"></i> <span class="c-main-site-footer__linklist-item-link-social-copy">Facebook</span> </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link-social" href="http://web.archive.org/web/20220817111826/https://www.linkedin.com/company/jisc"> <i class="fab fa-linkedin" aria-hidden="true"></i> <span class="c-main-site-footer__linklist-item-link-social-copy">LinkedIn</span> </a> </li> <li class="c-main-site-footer__linklist-item"> <a class="c-main-site-footer__linklist-item-link-social" href="http://web.archive.org/web/20220817111826/http://www.youtube.com/user/JISCmedia"> <i class="fab fa-youtube" aria-hidden="true"></i> <span class="c-main-site-footer__linklist-item-link-social-copy">YouTube</span> </a> </li> </ul></div> </div> </div> </div>  <div class="c-main-site-footer__utilities"> <div class="inner inner--main-site-footer"> <div class="c-main-site-footer-grid"> <div class="c-main-site-footer-grid__item u-6/12@medium u-9/12@large"> <ul class="c-main-site-footer__utilities-list"><li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer_utilities-list-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/website/cookies">Cookies</a></li> <li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer_utilities-list-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/website/privacy-notice">Privacy</a></li> <li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer_utilities-list-item-link" href="/web/20220817111826/https://www.jisc.ac.uk/about/corporate/slavery-and-human-trafficking-statement">Modern slavery</a></li> <li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer__utilities-additional-link" href="/web/20220817111826/https://www.jisc.ac.uk/about/corporate/carbon-reduction-plan">Carbon reduction plan</a></li> <li class="c-main-site-footer__utilities-list-item"><a class="c-main-site-footer__utilities-additional-link" href="/web/20220817111826/https://www.jisc.ac.uk/website/accessibility-statement">Accessibility</a></li></ul> </div> <div class="c-main-site-footer-grid__item u-6/12@medium u-3/12@large"> </div> </div> </div> </div> </div> <script src="//web.archive.org/web/20220817111826js_/https://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js"></script> <script>window.jQuery || document.write("<script src='/sites/all/modules/contrib/jquery_update/replace/jquery/1.8/jquery.min.js'>\x3C/script>")</script> <script src="http://web.archive.org/web/20220817111826js_/https://www.jisc.ac.uk/sites/default/files/js/js_38VWQ3jjQx0wRFj7gkntZr077GgJoGn5nv3v05IeLLo.js"></script> <script src="//web.archive.org/web/20220817111826js_/https://ajax.googleapis.com/ajax/libs/jqueryui/1.10.2/jquery-ui.min.js"></script> <script>window.jQuery.ui || document.write("<script src='/sites/all/modules/contrib/jquery_update/replace/ui/ui/minified/jquery-ui.min.js'>\x3C/script>")</script> <script src="http://web.archive.org/web/20220817111826js_/https://www.jisc.ac.uk/sites/default/files/js/js_yxpcsmG10aGVUSD90BA4qltlgKI1rbhnUmWB7jdXazY.js"></script> <script src="http://web.archive.org/web/20220817111826js_/https://www.jisc.ac.uk/sites/default/files/js/js_ln3elyxIXiDHhui9wGpVhQknbd0x6dFFLEcw-d2kY7c.js"></script> <script src="http://web.archive.org/web/20220817111826js_/https://www.google.com/recaptcha/api.js"></script> <script src="http://web.archive.org/web/20220817111826js_/https://www.jisc.ac.uk/sites/default/files/js/js_MRJGmiHDN-YmxpVwJXrmhddeFsDyTTAop4jAFfeWcSc.js"></script> <script src="http://web.archive.org/web/20220817111826js_/https://www.jisc.ac.uk/sites/default/files/js/js_NUoZMxIk0jJhXf5BZIGmdzbK72O3KtrmbiBW6Q62Zvk.js"></script> <script>jQuery.extend(Drupal.settings, {"basePath":"\/","pathPrefix":"","ajaxPageState":{"theme":"jisc_clean","theme_token":"eEYvz53awDU8IPGJ8mIOitPTzmgXcimPl9-UJc2G1Sw","js":{"\/\/web.archive.org\/web\/20220817111826\/https:\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/1.8.3\/jquery.min.js":1,"0":1,"misc\/jquery-extend-3.4.0.js":1,"misc\/jquery-html-prefilter-3.5.0-backport.js":1,"misc\/jquery.once.js":1,"misc\/drupal.js":1,"\/\/web.archive.org\/web\/20220817111826\/https:\/\/ajax.googleapis.com\/ajax\/libs\/jqueryui\/1.10.2\/jquery-ui.min.js":1,"1":1,"sites\/all\/modules\/custom\/jisc_search_section\/js\/jiscSectionSearch.js":1,"sites\/all\/modules\/custom\/jisc_ia_nav\/js\/JiscIaNav.js":1,"http:\/\/web.archive.org\/web\/20220817111826\/https:\/\/www.google.com\/recaptcha\/api.js":1,"sites\/all\/themes\/mothership\/mothership\/js\/contextual.js":1,"sites\/all\/themes\/jisc_clean\/js\/jisc-lib.min.js":1,"sites\/all\/themes\/jisc_clean\/js\/extras.js":1,"sites\/all\/themes\/jisc_clean\/js\/integration\/timeline.js":1,"sites\/all\/themes\/jisc_clean\/js\/jisc-p13n.js":1},"css":{"modules\/system\/system.base.css":1,"modules\/system\/system.messages.css":1,"sites\/all\/themes\/jisc_clean\/css\/content.css":1,"sites\/all\/themes\/jisc_clean\/css\/print.css":1}},"jiscFlashPath":"\/sites\/all\/themes\/jisc_clean\/flash\/","searchAutocompletePath":"\/server\/search-results","facetapi":{"view_args":{"rss_snippets:block_1":["56209"]},"exposed_input":{"rss_snippets:block_1":[]},"view_path":{"rss_snippets:block_1":null},"view_dom_id":{"rss_snippets:block_1":"7c96a8e974ee623156bc01b705233010"}},"urlIsAjaxTrusted":{"\/search":true}});</script> </body> </html>