Security Management Systems are the solutions which enable centralized management of information security across the organization in accordance with the requirements of security policy.

Implementation of security management system in the organization is not only the introduction of procedures of security policy. Effective security management is, above all, efficient response to any breach of established policy guidelines. The source of information about the breach of security is majority of solutions such as: antivirus software, access control systems, firewalls. This information across the organization needs standardization and adaptation to the needs of security requirements. This is the main task of comprehensive security management systems.

Functionality

• centralized and automated management and monitoring of the entire telecommunication system security,
• integration with all operating systems, databases and applications,
• access authentication to the system provided - both to the functions provided by the telecommunications system inside and outside of the organization environment,
• automated activities associated with the processing and analysis of information on the telecommunications security environment, in particular, event correlation process automation and risk areas detection,
• support for the risks management,
• standard reporting and "ad hoc" security events occurring in the system.

Benefits

• minimized response time in risk situations by providing with permanent inspection of security status of the ICT individual components and automation of responses,
• information centralization from heterogeneous IT environment,
• providing with important information only through the information noise reduction (filtering and correlation mechanisms),
• information audit support,
• simplified and standardized service through the integration of various security monitoring and protection solutions,
• support for the process of the risk estimation for individual ICT assets,
• shared information with regard to the user role in the organization,
• increased performance of Security System Inspectors.

Technology

• implementation of security management systems is based on the use of comprehensive solutions from reputable suppliers such as CA eTrust or NetIQ Security Manager,
• all solutions operate on the basis of a similar three-layer architecture based on the acquisition layer, aggregation and data presentation,
• acquisition layer is performed by agents or integration interfaces with existing information resources related to security,
• correlation layer that represents the data center system, is responsible for data preparation and enables - through specialized supplements - a detailed analysis of these data (eg. in the inquiry analysis),
• presentation layer that allows the access to user's information via web browser,
• system cooperates with a wide range of operating systems and applications, including Microsoft Windows, HP-UX, Sun Solaris, Linux, AIX, SQL Server, Oracle, McAfee. At the processing layer it is based on the Microsoft Windows 2003 and MS SQL.