Security Solutions
- SIEM
  Detect, investigate, and neutralize threats with our end-to-end platform.
- Log Management
  Gain full visibility into your data and the threats that hide there.
- SOAR
  Work smarter, more efficiently, and more effectively.
- UEBA
  Detect anomalous user behavior and threats with advanced analytics.
- Threat Detection
  Build a strong foundation of people, process, and technology to accelerate threat detection and response.
- Compliance
  Meet and report on compliance mandates, including PCI, HIPAA, NERC, CIP, and more.
- Security Solutions Overview
Products
- NextGen SIEM Platform
  We built the LogRhythm NextGen SIEM Platform with you in mind. Defending your enterprise comes with great responsibility. With intuitive, high-performance analytics and a seamless incident response workflow, your team will uncover threats faster, mitigate risks more efficiently, and produce measurable results.
- LogRhythm Cloud
  Simplify your security operations with full NextGen SIEM without the hassle of managing infrastructure.
- NetworkXDR
  Go beyond basic network traffic analysis with full detection, investigation, and response.
- UserXDR
  Bring clarity and context to anomalous user behavior by corroborating risk with full-featured UEBA.
- NetMon
  Gain the real-time visibility and security analytics you need to monitor your organization’s entire network.
- Try NetMon Freemium
Work With Us
- Partners
- Services Authorized Partners
- Partner Program
- System Integrators
- Technology Partners
- Partner Portal
- Customers
- Getting Started
- Services
- Training
- Community
- LogRhythm User Groups
- Support
- Request Demo
- Careers
Resources
- Resource Library
- Analyst Reports
- Product Demos
- White Papers & e-Books
- Case Studies
- Use Cases
- Threat Research
- On-Demand Webcasts
- All Resources
- Blog
  Read the latest security news and insights from security professionals and our award-winning LogRhythm Labs team.
- LogRhythm Labs
  Learn how our team of security experts can help you succeed through their real-world SOC experience.
- COVID-19 Resources & Support
  A message to our LogRhythm community about COVID-19
About
- About Us
- Executive Team
- Awards and Recognition
- Logiving
- Testimonials
Request Demo
Request Info

Engineering

LogRhythm Centralized Metrics’ main dashboards are customizable and visualize data in one user interface

Measure and Optimize SOC Performance with New LogRhythm Tools

When faced with a bombardment of threats and a severe resource shortage, the best way to keep your organization ahead of a damaging attack is to make the most of what you have. You need your team and tools to…

August 8, 2018

You can use LogRhythm and Kibana to track data at the POS

Enrich Your Security Data with LogRhythm and Kibana

Data is a powerful tool. But storing, organizing, and adding value to it to enable better decisions can be difficult. Most companies strive to find a way to best preserve all of their data, and then use that data to…

July 17, 2018

IT Security in an OT World

Before we had the Internet of Things (IoT), ubiquitous wireless access, high speed data pipes, or even core internet protocols including HTTP and TCP, we had industrial automation. Operational Technology (OT) is the latest umbrella term to encompass functionalities such…

January 24, 2018

Page 2 of 2

LogRhythm Blog

Read the latest security news and insights from security professionals and our award-winning LogRhythm Labs team.

Visit the Blog

Download useful infographics, posters, and white papers to send your employees.

Visit the Resource Library

Join the discussion! Share best practices, and give us your feedback.

Join the Community

SERVICES

Customer Success
Global Support
Training
LogRhythm Labs
Support Portal
Pricing & Licensing

PARTNERS

Technology Partners
Resellers & MSSPs
Consultants
Partner Portal

ABOUT | EXECUTIVES | CAREERS

1-866-384-0713
info@logrhythm.com

Security Operations Maturity Self-Assessment

How would you rank the maturity of your security operations? Complete this self-assessment to score your organization’s current level of security operations maturity, how to improve, and how to build a business use case for investment.

Security Operations Maturity Self-Assessment

Step 1 of 11

How would you describe your current approach to log management?*
- My organization does not centrally collect logs.
- Log collection and retention are primarily driven by audit requirements.
- Log collection is performed from all security devices, networking infrastructure, production servers, applications, and databases.
- Log collection also includes physical security systems and/or highest-value endpoint systems, plus some personal devices.
- Log collection is performed from all systems generating log and audit data.

How would you categorize your security information and event management (SIEM) capabilities?*
- I don’t have a SIEM in place.
- My SIEM is primarily used to demonstrate audit compliance.
- My SIEM is used to monitor for and respond to compliance and security threats.
- My SIEM is used to understand cybersecurity risk across the entire production environment.
- My SIEM is used to understand cybersecurity risk across the entire logical, physical, and social environment.

How would you rate your vulnerability intelligence capabilities?*
- My organization doesn’t have a vulnerability management system (VMS) in place.
- My organization’s VMS scans only the system in scope for compliance.
- My organization’s VMS periodically scans network perimeter systems and highest-risk systems.
- My organization has holistic vulnerability intelligence with basic correlation and workflow integration.
- My organization has holistic vulnerability intelligence, with advanced correlation and automation workflow integration.

How would you categorize your threat intelligence capabilities?*
- My organization doesn’t have any threat intelligence.
- My organization has limited use of open-source threat intelligence.
- My organization has reactive and manual threat intelligence workflow.
- My organization offers indicators of compromise (IOC)-based threat intelligence integrated into analytics and workflow.
- My organization offers industry-specific and internally generated IOC- and TTP-based threat intelligence integrated into analytics and workflow.

How would you describe your organization’s user & entity behavioral analytics (UEBA) capabilities?*
- My organization doesn’t have any specific monitoring of user activity.
- My organization monitors privileged users.
- My organization conducts scenario-based monitoring of all users for known bad activity.
- My organization uses real-time UEBA to monitor trends and patterns.
- My organization uses real-time forensic monitoring deployed on every production server and user workstation in the environment in combination with UEBA.

How would you rate your organization’s endpoint analytics?*
- My organization doesn’t offer endpoint monitoring.
- My organization’s endpoint monitoring is deployed on a limited number of servers within compliance scope.
- My organization has real-time forensic monitoring, including FIM and process monitoring, and deploys it to some production servers.
- My organization has real-time forensic monitoring, including FIM and process monitoring, and deploys it to all production servers.
- My organization’s real-time forensic monitoring is deployed on every production server and user workstation.

How would you describe your organization’s level of network analytics?*
- My organization doesn’t have a network forensic solution.
- My organization uses ad-hoc packet capture for troubleshooting.
- My organization uses ad-hoc packet capture used for after-the-fact analysis.
- My organization has real-time network forensic monitoring solutions deployed at internet egress points.
- My organization has real-time network forensic monitoring solutions deployed at multiple locations.

How advanced is your organization’s incident-management toolset?*
- My organization doesn’t have any tools for incident management.
- My organization makes its best efforts for incident management.
- My organization has disparate tools and systems to manage incidents.
- My organization has security tools integrated with a centralized help-desk-style ticketing platform.
- My organization has a centralized incident management platform with rapid access to all log data. My organization has secure storage for evidence and case management workflow.

How much does your organization use holistic analytics?*
- My organization doesn’t offer analytics applied to log data.
- My organization has real-time analytics on exception-based data to detect compliance violations.
- My organization has real-time scenario-based analytics corroborated across log source types.
- My organization has real-time scenario-based analytics across all systems and behavior-based analytics for targeted use cases.
- My organization uses detailed mapping and implementation of both scenario- and behavior-based analytics across wide-ranging data sources for holistic security analytics.

At what level does your organization use orchestration and automation?*
- My organization doesn’t have any tools for orchestration and automation.
- My organization offers limited internal automation of SIEM tooling.
- My organization has basic automation to improve the efficiency and speed of threat investigation and incident response processes.
- My organization has extensively automated threat qualification, investigation, and response processes.

How would you rate your organization’s people and processes?*
- My organization doesn’t have any trained or skilled security analysts.
- My organization does ad-hoc monitoring and response on a best effort basis. There are some formal processes.
- My organization has basic processes for monitoring alarms and responding to security incidents and tiered responsibilities. My organization may have an outsourced incident response capability.
- My organization has formal playbooks document processes and gathers basic metrics. My organization has an 8x5 virtual or physical SOC that provides “eyes-on-the glass,” and delivers centralized orchestration of threat analysis and incident response.
- My organization has advanced operational metrics and reporting and continually reviews processes. My organization has a 24x7 virtual or physical SOC that provides “eyes-on-the glass” and delivers centralized orchestration of threat analysis and incident response.

We are using cookies to give you the best experience on our website.

You can find out more about which cookies we are using or switch them off in settings.

Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

Strictly Necessary Cookies

Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.

Enable or Disable Cookies

If you disable this cookie, we will not be able to save your preferences. This means that every time you visit this website you will need to enable or disable cookies again.