University of York - Security Information and Event Management (SIEM)

Concepts

• york
• data security
• security information
• security orchestration
• siem
• event management
• the elastic search cloud security service
• security information and event management
• siem and edr functions
• security orchestration and automated response (soar) capability

Location

YORK

Description

The university requires a single solution for Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR) and Security Orchestration and Automated Response (SOAR) capability and the Elastic Search Cloud Security service provide the university with a single agent solution will analyse events on endpoints and provision and correlate logs from devices across the university's IT estate, providing the University with a real-time threat detection, incident response, compliance reporting and forensic analysis capabilities covering SIEM and EDR functions and allowing SOAR capability.

Award Detail

CPV Codes

• 48732000 - Data security software package

Indicators

Legal Justification

No alternative viable source with the full range of service with one fully operating proven technology in general availability with an evidenced client-base in the HEI sector.