Implementation process for Logsign:
Initial Assessment and Planning: The process begins with an initial assessment to understand the organization's specific needs and requirements. This includes identifying the key security challenges and objectives that the Logsign platform will address.
Integration and Configuration: Logsign provides an extensive range of pre-defined integrations for a flexible Security Information and Event Management (SIEM) architecture. The platform supports over 400 log collection sources and 100+ pre-defined automated response integrations, which facilitate seamless integration with existing systems and tools.
The API-first approach allows for customized configurations to meet the unique needs of the organization, ensuring that the platform is tailored to the specific security environment.
Deployment: The deployment of Logsign's Unified Security Operations Platform is designed to be fast and efficient. The platform's user-friendly interface and unified architecture simplify the deployment process, reducing the time and complexity typically associated with implementing multiple security tools.
The deployment process includes setting up the Logsign Cyfusion, which provides a comprehensive solution for enhancing cyber resilience, including threat intelligence, User and Entity Behavior Analytics (UEBA), and automated detection and response.
Testing and Validation: After deployment, the platform undergoes thorough testing to ensure that all integrations and configurations are functioning correctly. This step is crucial for validating the effectiveness of the security measures and ensuring that the platform meets the organization's security requirements.
Training and Onboarding: Logsign offers training and onboarding sessions for the organization's security teams to ensure they are well-versed in using the platform. This includes training on how to leverage the platform's features for rapid detection and response to security incidents.
Ongoing Support and Optimization: Post-deployment, Logsign provides ongoing support to address any issues and optimize the platform's performance. The support team is known for being fast-responding and knowledgeable, helping organizations to continuously improve their security posture.
Implementation Timeline: The exact duration of the implementation process can vary depending on the size and complexity of the organization's security environment. However, Logsign's platform is designed to avoid long deployment times, ensuring a rapid and timely implementation.
Customizable Dashboards and Widgets: Logsign provides over 40 pre-configured dashboards arranged across 11 categories, covering various security aspects like threat intelligence, user behavior analytics, and compliance.
Users can easily customize these existing dashboards by adding, modifying, or removing widgets through a user-friendly interface.
It is also possible to create entirely new custom dashboards and populate them with desired widgets, enabling organizations to tailor the platform to their specific monitoring and reporting needs.
Flexible Correlation Rules: Logsign comes with a library of pre-built correlation rules that are continuously tested and updated. However, users can define and customize their own correlation rules based on their organization's security policies and requirements.
This allows for the detection of specific threat patterns or anomalous behavior that may be unique to the business environment.
Customizable Reporting: Logsign offers over 100 types of pre-configured reports that can be exported in various formats like XML, HTML, and PDF. Users can customize existing reports by modifying parameters such as data sources, time ranges, grouping, and filtering criteria.
Role-Based Access Control (RBAC):
Logsign supports role-based access control, allowing organizations to define custom roles and permissions for different user groups.
This ensures that users only have access to the dashboards, reports, and functionalities relevant to their roles and responsibilities within the organization.
Data Policy Manager: Logsign's Data Policy Manager enables organizations to optimize log management and collection by creating data policies for individual log sources or groups. This allows for efficient log retention, storage management, and cost optimization based on specific business requirements.
Integration and Customization Services: Logsign provides an extensive range of pre-defined integrations for log collection sources and automated response integrations. Additionally, Logsign offers customization services to help organizations integrate the platform with their existing security tools and workflows, ensuring a seamless and tailored solution.
Technical Training Program: Logsign provides a technical training program designed to empower technical staff with the knowledge and skills needed to deliver exceptional service and support to customers.
This program includes detailed sessions on the functionalities and features of the Logsign Unified Security Operations (SO) Platform, ensuring that users are well-equipped to handle technical aspects of the software.
Sales Training Excellence: For partners and sales teams, Logsign offers top-notch sales training through on-demand sessions. This training helps teams effectively communicate the value of Logsign solutions and drive customer satisfaction.
Logsign Academy: Logsign Academy offers a range of courses that new users can sign up for to become certified Logsign users or administrators. These courses cover various aspects of the Logsign Unified SO Platform in detail, providing a structured learning path for users.
The academy includes courses on getting started with Logsign, system overview, and other essential components to manage the platform effectively.
Support Services
Customer Support Team: Logsign is known for its fast-responding and knowledgeable customer support team. Users can contact the support team through various channels, including a specially prepared contact form on the Logsign Support Center website.
The support team assists with any issues or questions users may have, ensuring a smooth experience with the platform.
Onboarding Support: Logsign provides excellent and fast onboarding and deployment stages, supported by a vast pre-defined integration library. This ensures that new users can quickly and efficiently integrate Logsign with their existing systems.
The onboarding process is designed to be hassle-free, saving time and effort for new users and allowing them to start using the platform effectively in a short period.
Documentation and Resources: Logsign offers extensive documentation and resources through its support center. This includes articles, guides, and datasheets that provide detailed information about the platform's features, integration processes, and best practices.
Users can access these resources to find answers to common questions and learn more about how to optimize their use of the platform.
security measures for Logsign:
Data Protection and Security Measures
Access Control: Logsign employs role-based access control (RBAC) to manage individual users' and teams' product usage authorizations, ensuring data privacy and preventing unauthorized access.
Physical access to data processing systems is controlled through measures such as keycards for building entry and restricted access to sensitive areas like server rooms.
Data Encryption: Data is protected during transmission using secure encrypted channels such as SSL Secured VPN and SFTP, ensuring that sensitive information is not exposed during transfer.
Encryption algorithms like AES and RSA are used to secure data stored on devices, making it unreadable to unauthorized users.
Data Management and Retention: Logsign's Data Policy Manager allows for efficient data management, including log retention and storage management, ensuring that data is stored securely and in compliance with regulations.
The platform supports long-term data retention with unlimited log storage, providing a secure environment for storing large volumes of data over extended periods.
Incident Detection and Response: Logsign's SIEM platform includes advanced threat detection capabilities, such as multi-machine correlation architecture and real-time data enrichment, to identify and respond to security incidents quickly.
Automated incident notification and response mechanisms are in place to mitigate and eradicate threats before they cause significant damage.
Compliance and Reporting: The platform helps ensure compliance with various regulations, including GDPR and PCI DSS, by providing comprehensive compliance reporting and monitoring capabilities.
Built-in compliance reports and customizable dashboards enable organizations to maintain and demonstrate compliance with data protection standards.
Data Integrity and Backup:
Logsign ensures data integrity through measures like logging and monitoring of data administration activities, ensuring traceability and accountability for data changes.
Regular backups and secure storage of critical data are implemented to protect against accidental data loss or destruction.
Threat Intelligence and Behavior Analysis: The platform integrates threat intelligence services and user and entity behavior analytics (UEBA) to detect and analyze abnormal behavior, enhancing the ability to identify potential threats.
Real-time enrichment of data with threat intelligence helps in proactive threat detection and response.
Frequency of Updates: Regular Updates: Logsign releases updates periodically, with new features and improvements being rolled out as part of their ongoing development cycle. For example, the release notes for version 6.3.34 were published on August 31, 2023, indicating a structured approach to versioning and updates.
Continuous Improvement: The platform is continuously enhanced with new features, bug fixes, and performance improvements. This ensures that users have access to the latest advancements in cybersecurity technology.
Management of Updates: Automated Update Process: Logsign provides an easy and automated update process that can be managed directly from the console. This simplifies the process for users, allowing them to keep their systems up-to-date with minimal effort.
Release Notes and Documentation: Each update is accompanied by detailed release notes that outline the new features, changes, and fixes included in the update. This documentation helps users understand the impact of the update and how to leverage new functionalities.
Support and Assistance: Logsign's support team is available to assist users with the update process, ensuring that any issues or questions are promptly addressed. This support helps maintain a smooth and uninterrupted operation of the platform.
Example of Recent Updates: Version 6.3.34: Released on August 31, 2023, this update included new features such as the replacement of the Behaviour name with bucke and changes to the datatype list to bucket.
Data ownership and portability for Logsign:
Data Ownership
User Control and Rights: Logsign respects the privacy and ownership of data collected through its platform. Users have the right to control their data, including the ability to access, modify, and delete their personal information.
The company adheres to data protection regulations such as GDPR, ensuring that users' rights to their data are protected and that data is handled in compliance with legal requirements.
Data Collection and Use: Logsign collects and stores personally identifiable information (PII) provided by users to facilitate the use of its services. This includes names, contact information, and other basic user identification data.
The platform also collects aggregated data through cookies and other tracking technologies to improve service delivery and user experience.
Data Security: The security of collected data is a priority for Logsign, which implements both internal and external audit activities to verify data protection measures annually.
Logsign ensures that data is protected against unauthorized access, misuse, and breaches through robust security protocols and encryption.
Data Portability
Portability Rights:
Logsign supports data portability, allowing users to move, copy, or transfer their data from the Logsign platform to another system or service without losing its quality, usability, or functionality.
This capability is in line with GDPR requirements, which grant data subjects the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit those data to another data controller.
Technical Measures: Logsign employs secure protocols and channels for data transfer, ensuring that data portability does not compromise the security and privacy of the data.
The platform uses encryption and other technical measures to protect data during transit and at rest, minimizing the risk of unauthorized access or data loss during the transfer process.
Data Management Features: Logsign's SIEM platform includes features for managing data policies, log capture, and data connections, which facilitate the efficient handling and transfer of data.
Terms and conditions for Logsign:
Automatic Renewal: Contracts with Logsign may include an automatic renewal clause. This means that unless one party provides notice to the other of the intent to end the contract upon its scheduled termination, the contract will automatically renew for a period specified in the contract.
Manual Renewal: Contracts can also be renewed manually. This involves both parties realizing that the agreement is set to expire soon and discussing the terms of a new arrangement or deciding to mutually terminate.
Review and Renegotiation: Contract renewal provides an opportunity to renegotiate terms. This could include adjustments to pricing, service levels, or even a complete restructuring of the work scope.
Notification Requirements: To avoid automatic renewal, it is essential to give advance notice. This allows time for contract review, usage analysis, assessment of operational needs, and negotiation of better terms.
Contract Cancellation
Non-Renewal: Non-renewal of a contract is not the same as termination. When businesses decide not to renew a contract, they are still bound to the terms of their existing contract until it expires.
Termination: Contract termination occurs when a contract is ended prematurely before the outlined contract duration is over. Specific terms for termination, including any penalties or notice periods, would typically be detailed in the contract itself.
Contact Information for Issues: If there are any issues or inconsistencies with the contract, Logsign provides contact details for their compliance team. They can be reached via email at [email protected] or via mail at their San Francisco office.
General Practices
Data Security and Compliance: Logsign ensures the security of data as described in the contract and service terms, verified annually through internal and external audits.
Modification of Terms: Logsign reserves the right to modify its privacy policy and terms from time to time without notice. Such modifications become effective when posted.
Logsign adheres to the following compliance standards:
PCI DSS (Payment Card Industry Data Security Standard): Logsign helps organizations comply with PCI DSS by continuously logging, monitoring, backing up, and reporting on all network connections and changes. It identifies abnormal traffic and suspicious behavior to alert security teams, enhancing data security in accordance with global payment card standards.
HIPAA (Health Insurance Portability and Accountability Act): Logsign ensures compliance with HIPAA by securing sensitive health data and monitoring data access to mitigate insider threats. It provides comprehensive solutions for safeguarding protected health information.
ISO 27001: Logsign supports ISO 27001 compliance by aggregating event data from multiple systems and managing the security of sensitive information. It helps organizations rapidly review critical asset information, contributing to a robust security framework aligned with international standards.
GDPR (General Data Protection Regulation): Logsign assists institutions in meeting GDPR requirements through monitoring, identification, response, and reporting capabilities. It ensures that data is stored and managed in a traceable manner, complying with the strict data protection requirements of the EU.
FISMA (Federal Information Security Management Act): Logsign helps organizations comply with FISMA by providing comprehensive log management and security information management, which includes risk management, information security policies, and procedures.
SOX (Sarbanes-Oxley Act): Logsign supports SOX compliance by providing timely reports, continuous monitoring, and retention of security events. It helps organizations maintain a good security posture to adapt to existing security, governance, and auditing processes.
NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection): Logsign ensures compliance with NERC CIP by providing robust security measures for critical infrastructure, including continuous monitoring and incident response capabilities.
GLBA (Gramm-Leach-Bliley Act): Logsign helps organizations comply with GLBA by safeguarding personal financial information through comprehensive reporting and monitoring of user activities.
KVKK (Turkish Personal Data Protection Law): Logsign provides comprehensive solutions for data protection and privacy, ensuring secure data handling, monitoring, and reporting to meet the stringent requirements of KVKK.
Logsign Unified SO Platform
By Logsign
