ThetaPoint provides industry leading ArcSight Consulting and Managed Services. Organizations look to ThetaPoint to help them modernize their ArcSight investment to address today’s advanced cybersecurity use cases. Leveraging the ThetaPoint Security Reference Architecture, we help optimize the capabilities of ArcSight ESM and ArcSight Logger to meet the needs of today’s Security Operations Centers (SOCs).
ThetaPoint consultants have delivered more than 2,000 ArcSight engagements over the past two decades and are recognized for their technical acumen and thought leadership in SIEM and Log Management solutions. Possessing the only two Level V Certified ArcSight Master Architects on the planet, commercial and government institutions of all sizes turn to the experts at ThetaPoint for their ArcSight needs. Contact ThetaPoint to learn how you can realize maximum value from your investment in ArcSight today.
ArcSight – A Legacy SIEM built for the Future
ArcSight Enterprise Security Manager (ESM) is a comprehensive real-time threat detection, analysis, workflow, and compliance management platform with increased data enrichment capabilities. ArcSight detects and directs analysts to cyber-security threats, in real time, helping security operations teams respond quickly to indicators of compromise. By automatically identifying and prioritizing threats, teams avoid the cost, complexity and extra work associated with being alerted of false positives. ESM allows SecOps organizations the ability to have a centralized, powerful view into their multiple environments creating workflow efficiency for streamlined processes. Through improved detection, real-time correlation, and workflow automation, SOC teams can resolve incidents quickly and accurately.
In the 2020 Gartner Magic Quadrant it is noted that ArcSight rarely appears on shortlists for new SIEM deployments outside of certain geographic areas. We believe this is a missed opportunity for organizations who are evaluating their SIEM options. From our experience, ArcSight remains one of the best Security Information and Event Management (SIEM) platforms on the market today. Adopted by some of the largest and most sophisticated institutions, it receives top marks for its SmartConnector data collection framework, event correlation and monitoring capabilities with ESM, and extensive integration capabilities into other Security Operations Center tools and platforms.
Enterprise customers of the ArcSight platform have invested lots of money and time into their SIEM and still rely heavily on it for event capture and event monitoring due to its excellent correlation, alerting, analysis and reporting capabilities. Even so, organizations are increasingly augmenting their ArcSight platform with other technologies to help drive down the cost and effort associated with incident response and triage. ThetaPoint has helped organizations of all sizes and industries adapt to this changing landscape and leverage the right solution for the right problem at the right time. Organizations that partner with ThetaPoint are able to extract more value out of their ArcSight investment and prepare themselves better for the future demands of Security Operations. To learn more about our ArcSight Consulting and Managed Services, please continue below.
ArcSight is a registered trademark™ of Micro Focus.
Operations & Maintenance
Most organizations find it difficult to identify and retain qualified IT security resources. The types of individuals required to run a Security Operations Center (SOC) just don’t exist in some cases. Most research studies will tell the same story, there are not enough qualified personnel available to meet today’s cyber security needs. Many times organizations find themselves in bidding wars for these talents and that is assuming they can find the correct qualifications for their business.
Companies are becoming increasingly aware of the threat landscape and the true risks of cyber incidents all the way up to the board level. Unfortunately, organizations lack the experts they need to truly utilize the tools at their disposal.
To address this problem for organizations, ThetaPoint provides a co-managed ArcSight Operations & Maintenance (O&M) service to eliminate the resource gap that exists in organizations today. The ThetaPoint O&M service delivers global 7×24 management and monitoring of your ArcSight solutions in a secure co-sourced model.
The ArcSight managed service offering is composed of four critical components; Regular Maintenance, 7×24 Monitoring, Premium Support, and Touch Free Services.
Regular Maintenance
ThetaPoint’s ArcSight Managed Service proactively maintains and updates your SIEM/Log Management Platform. Proper maintenance is important to insure new features are installed, removes outdated features, updates drivers, delivers bug fixes and most importantly, plugs security holes that have been identified. Software manufacturers overwhelm organizations with patches, hot-fixes and other updates to meet the above needs. Resources are not confident on what patches/updates need to be applied and why. ThetaPoint eliminates this guesswork and handles the tasks for you. We will validate the need for an update, what business/technical benefits are achieved with the update and what is required to do so. In addition, we will only apply the patches/updates that are relevant to you and your business. Eliminate the risk of going through an expensive change process for a non-value add update with ThetaPoint’s ArcSight Managed Service for regular maintenance.
7x24 Monitoring Services
ArcSight products are relied on to ensure compliance, identify security incidents and provide insight into security events across disparate systems. Therefore, it is paramount that your ArcSight Environment is operating optimally at all times. ThetaPoint’s O&M managed service monitors your ArcSight Products 7 days a week, 24 hours a day for the following issues:
- Availability
- Performance / Resource Utilization
- Capacity
- Fatal and Warning Errors
- Parsing Issues
- Constant Event Delivery
- License Compliance
Premium Support
Over the past 5 years we have witnessed a variety of mergers and acquisitions in the SIEM/Log Management marketspace. Unfortunately, a byproduct of these acquisitions has been a drain of talent from the acquired firm as the company is slowly integrated into the acquiring firm’s culture and processes. This has had a profound impact on customer experience and support for those that leverage the newly acquired technology. Long wait times, calls that go unanswered, disconnected support sites all lead to increased Mean Time to Resolutions for customers and downright anger and frustration working with the new support organization.
ThetaPoint understands this frustration and provides our clients a truly unique experience. With the ThetaPoint O&M service, we become an extension of your team and will work directly with ArcSight / Micro Focus on your behalf so you don’t have to. If you have a question and don’t want to waste time scrolling through knowledge bases, our experts can answer it quickly. If you have a P1 ticket that seems to be in support limbo, leave it to ThetaPoint. Start spending your time managing your business risk while we manage your ArcSight environment!
Touch Free Services
Touch Free Services is an optional addition to the O&M Service Offering. Touch Free hours are primarily used for break / fix situations that are discovered during monitoring. However, the time may be used for any ThetaPoint service offering. Many of our clients utilize this time to conduct quarterly use case/business case reviews and make necessary content/application changes to stay abreast of today’s modern threat landscape.
ArcSight Products Supported
ThetaPoint currently offers Operations & Maintenance managed service for the following ArcSight solutions:
- ArcSight ESM
- ArcSight Logger
- ArcSight SmartConnectors
- ArcSight Management Console (ArcMC)
- ArcSight Event Broker / Kafka
Testimonials
ArcSight Consulting Services
ThetaPoint provides industry leading ArcSight Consulting and Managed Services. Organizations look to ThetaPoint to help them modernize their ArcSight investment to address today’s advanced cybersecurity use cases. Leveraging the ThetaPoint Security Reference Architecture, we help optimize the capabilities of ArcSight ESM and ArcSight Logger to meet the needs of today’s Security Operations Centers (SOCs).
The following are ArcSight specific services that can be used a la carte or as part of a larger modernization project. Contact ThetaPoint to learn how you can realize maximum value from your investment in ArcSight today.
Testimonials
For more information on this Solution or other ThetaPoint Service Offerings, please contact us.
