Compliance
Goal
Simplify audit readiness with centralized log management, flexible data retention, reporting, and dashboard analytics.
How SentriaOne xSIEM supports it
| Capability | Contribution |
|---|---|
| Centralized log management | Collects logs and network records from many sources into one place |
| Search | Finds records for an audit question or incident across all data sources |
| Data retention | Keeps records available for the period your policy requires |
| Reporting | Produces executive, security, network, and application reports on demand or on a schedule |
| Detection tracking | Keeps a record of how each detection was handled, by whom, and when |
Typical workflow
- Connect the required log sources and network traffic. See Integration.
- Confirm data is arriving on Data Feed Health.
- Answer audit questions with Records — for example, all connections from a given host in a given period.
- Schedule regular reports on Reports and deliver them by email.
- Use Detection Tracking notes and statuses as evidence of how security events were handled. See Detection Details.
Evidence available
| Audit need | Evidence in SentriaOne xSIEM |
|---|---|
| Record of network activity | Records (for example connection, DNS, HTTP, and TLS records) |
| Periodic security summary | Executive and Security reports |
| Handling of security incidents | Detection Tracking status, assignee, and notes |
| Inventory of systems | Assets device list (exportable) |
note
Which regulations apply, and the required retention periods, depend on your organization. Confirm retention settings for your deployment with your SentriaOne xSIEM administrator.