Security Information & Event Management (SIEM)

Liverpool City Council requires the capability to consolidate, manage and evaluate log information from key ICT systems and infrastructure, to correlate Security Incident Events and identify threats and attacks based on out of the box and customisable rule based metrics. Liverpool City Council operates dual datacentres hosting central servers, both physical and virtual. We run UNIX, Windows, Cisco, VMware Oracle, and EMC systems and infrastructure. This system or solution is to be used, configured, and operated by Liverpool City Council ICT staff.