A Deeper Looker at the D3 Security Service Portfolio

D1 - Decurity Customer Focus, Trusted Advisor and Decurity Customer Profile: This is a true partnership. Decurity takes the time to understand the customer's requirements and not simply the technology. Our focus on the customer is what elevates us from everyone in the market. Our entire company is fully dedicated to your success in Information Security. Decurity will ensure that the Log Management and/or SIEM systems will not only function for you in your environment, but will evolve with you as your requirements change. The Decurity Trusted Advisor service goes one step further and makes our expert team available to you for all your information security technology and program questions. We're your on-call SME. We don't resell products so you can be assured our answers are simply based on "what works". Our Customer Profile allows us to share detailed information about your environment and requirements in a secure manner so that the most relevant information is available to our staff and to you at all times.

D2 - Decurity Threat Intelligence: We have integrated dozens of threat feeds into our own Decurity Threat Intelligence System so that we can create the most relevant comparison/identification lists that can be directly integrated into your Log Management and/or SIEM system. Example Benefit: We can help automate the updating of Active Lists on a daily basis so that you can instantly identify malicious events (inbound or outbound). The identification of Suspicious and/or Malicious IP's, Domains, Regex statements are just the beginning of this service offering. This adds an incredibly valuable identification and analysis tool to your SIEM!

D3 - Decurity Expert Configuration: Decurity's Team is second to none when it comes to Security Operations, Log Management and SIEM. Our experts have architected, deployed, managed, and fixed hundreds of Log Management and SIEM deployments across the world. This service puts all of our experts to work for you, all of the time.

Decurity is 100% focused on Customer Sucess - We provide a customizable service that meets understands your situation, anticipates your needs and delivers on a daily basis! Whether you need assistance with a new implementation, upgrading an existing one, expanding your systems, or even managing or refining your Log Management and/or SIEM we work alongside you every day, to do the heavy lifting so that you can focus on your business more effectively.

The highlight of the Decurity D3 Service is that customers can search, identify and download relevant content for their SIEM or Log Management System. The Decurity D3 Service also enables customers to submit requests for specific content to be developed and delivered. We work with you to define the Problem Set, identifying the relevant Event Sources (Data) and ensuring the output (Actions, Rules, Reports) is relevant and tuned appropriately. You get access to our entire team of Log Management and SIEM experts to build solutions alongside you without the need for additional FTE's, SME's, Training or additional consulting services. Below is a brief overview of how that service is presented to our customers through Workspaces and Content.

Decurity Workspaces:

Accessed through a unique web each Decurity Customer Portal allows for one or more workspaces (illustrated below) that contain the Decurity provided content packages, descriptions and links to solution articles for download and immediate implementation. You may want specific user groups or business units to have access to only their relevant content. Workspaces allow for that granularity, security and organization.

Decurity Content:

Each Decurity content package has "tags",version control, comments, solution descriptions and the ability to see the relevant event sources before you download. You can also subscribe to a Workspace and/or Content and be notified of updates to subscribed content automatically. Should the content you want not yet exist or need to be "tuned" more appropriately for your specific environment, a simple support request will launch our team into action. We'll work alongside your team to gather the relevant information and begin the process of tuning, testing and helping you implement the refined "On-Demand" Content.

Decurity D3 Value Proposition:

Experience over the last 6 years shows that in addition to normal system, database and application Operations and Maintenance (O&M) activities, Entperprise SIEM customers have multiple FTE's dedicated to updating, configuring and making the best use they can out of the SIEM in their hands. Even with that effort most SIEM customers have a system that is basically in a default configuration and not adding nearly the value that is possible. If you consider that a basic enterprise size deployment takes at a minimum 2 FTE's to Implement, Configure, Maintain, Upgrade, Update, Build/Refine Content, and then consider that those tasks don't even account for the team needed to respond to escalated events of interest, or build in operational measurements and refinements to gain greater scalability, usages out of the system you can see that SIEM is an investment in a Security Operation Program and not just a single technology.

Our Decurity Experts deliver all of this functionality through the Decurity D3 Service so that you can focus on the output of the SIEM and your core business. The cost of this service is significantly less than the cost to build, train and maintain an internal team or to even hire contracted SME resources. The value of this service is that your team will extract every ounce of value from the SIEM. Compliance, Security Operations/Incident Response Teams will benefit from a tool that works to support their needs. Security Analysts can focus on Events of Interest and not System/Application administration tasks or configuration of complex correlation or workflow. Your team is freed to do their job and the tool's use is maximized to support the program.

Available immediately, Decurity D3 Service is offered in support of ArcSight Logger, ArcSight ESM 4.x and Splunk Customers.

If you are interesting in learning more or subscribing to Decurity's D3 Service Offering, please use this link to contact us.