CESG CCTM Accreditation
November 2011. We are delighted to announce that our Forensic Log Management and Security Information and Event Management (SIEM) product, Assuria Log Manager (ALM), has been awarded CESG Claims Tested Mark (CCTM) certification, the UK Government quality mark for private and public sector.
ALM, which maintains a forensic audit trail of original log data from any system, server or device within the IT infrastructure and provides facilities to correlate, analyse, report and alert on security relevant system activity, underwent intensive testing at the leading independent testing laboratory, ENEX Test Lab, which is authorised by CESG to validate the functionality claims made by vendors, thus giving purchasers confidence that the product has been independently tested and the results verified by CESG.
ALM is the third generation of log management and SIEM technology developed by this team, beginning with the Event Log Manager product launched by March Information Systems in 1996 and encapsulates the experience of over 20 years of top-level industry expertise. ALM securely collects, stores, translates and analyses unaltered audit and event log data from any system, server or device, giving a unique insight into all user and system activity.
ALM is in use in Commercial Organisations as well as in the Government space, where it has helped customers to comply with the strict guidelines laid out in CESG’s comprehensive Good Practice Guide Number 13, (GPG-13), the Protective Monitoring guide for UK public sector IT.
Malcolm Higgins, at ENEX Test Lab, confirmed “Assuria Log Manager was rigorously tested by ENEX, in accordance with CESG policy, and passed all tests at the highest level. We are happy to confirm this product is highly satisfactory in fulfilling its stated functions of protective monitoring, safeguarding information systems, capturing original log data and monitoring user activity”.
Assuria Log Manager and the company’s Assuria Auditor product are currently in use across 30 countries, by major public and private-sector bodies, including organisations such as BAE Systems, Gulf International Bank and Johns Hopkins University Applied Physics Labs.