This would be a good time to make sure your SIEM solution’s
product team is getting ready to correlate the security audit events that will
soon be available from a certain “Mobile first, cloud first” company based in
Redmond, Washington USA. With the new 2016 family of on premise products, the
support window for the older versions is reduced. But more than that, the new
releases and functionality are inexorably pushing organizations to the cloud.
If you thought BYOD was your troublesome dinner guest to
conventional IS/IT and InfoSec, cloud-based apps will be your rebellious
teen-ager who is the apple of his grandparents’ eye. Microsoft executives
receive a lot of attention from the editors and reporters your C-suite people
read, and it would seem all they can talk about are features and benefits of
their cloud-based enterprise applications. So expect internal pressure to
increase. Here are some things to know:
- LOGbinder will bridge the gap between your
SIEM and the new cloud applications, and we are well-along with our new
product development; you will have that easy button to push when you’re ready. LOGbinder’s
output will be optimized for the SIEMs that work with us on the project.
- Your SIEM should be preparing now to do
something smart with the new events and scenarios these cloud apps will script.
The SIEM product development team should be talking to Randy Franklin Smith about
the coming new world order in terms of recommended rules and alerts for cloud
security audit.