HP ArcSight ESM (Enterprise Security Manager)
Security Information Event Management (SIEM) solution
HP ArcSight ESM analyses and correlates every event that occurs across the organisation – every login, logoff, file access, database query, etc. – to deliver accurate prioritisation of security risks and compliance violations.
HP ArcSight ESM is uniquely able to understand who is on the network, what data they are seeing, which actions they are taking with that data, and how that affects business risk.
• User and role data structures to model and monitor user activity across systems and applications
Case Study - HP ArcSight helps BMW drastically decrease incident response times