sb-nz logo
Story image

LogRhythm launches GDPR compliance module as deadline draws near

19 Jan 2018

LogRhythm has taken the plunge into the pre-GDPR market as businesses worldwide prepare their compliance strategies.

The General Data Protection Regulations protect the European Union and its citizens and will come into effect on May 25.

Any businesses that collects and processes personal data of any EU citizen must comply with the regulations. Non-compliance may result in fines of up to €20 million or 4% of a company’s annual global annual revenue – whichever is the greater sum.

If an organisation offers goods or services, maintains offices or operates a website in the EU, it is likely that GDPR regulations apply, the company says.

“Given the breadth of the GDPR, no single solution provides automatic compliance with all aspects of the regulation. In fact, there are more people and process requirements to the regulation than technology,” explains LogRhythm CISO James Carder.

According to Gartner statistics, less than 50% of organisations that are affected by GDPR will be fully compliant with the regulation – even after it comes into effect.

LogRhythm has created a fully-integrated security solution that achieves and validates GDPR compliance.

“It’s clear that LogRhythm has put in significant time and effort to actually address GDPR,” comments UK SBS information security analyst Chris Kruk.

The company’s General Data Protection Compliance Module is designed with a pre-built suite of rules, alerts and reports mapped to GDPR articles.

  “The LogRhythm GDPR Compliance Module offers a simplified approach towards meeting this new regulation by providing a fundamental security framework designed to help organizations address the technology requirements of the GDPR. This framework helps organizations reduce risk, avoid fines and preserve their ability to conduct business in and with the EU,” Carder continues.

LogRhythm claims its solution is the ‘first on the market’ that integrates compliance with tech-focused GDPR articles.

The module includes capabilities including GeoIP configurations, a machine data intelligence fabric, an AI engine and risk-based prioritisation.

“The new investigation templates and other components dedicated to GDPR are very useful, and the GDPR reports provide a very good overview of the requirements of GDPR, Kruk continues.

LogRhythm also says its Compliance Module is available free to all LogRhythm customers, as are all of its other modules.

“Organisations implementing the module can realize immediate benefits, thanks to the suite of pre-built content that delivers a more efficient and effective solution over manual processes and other technologies,” the company explains.

Story image
Phishing scam imitates SharePoint & OneNote for nefarious clicks
Sophos researchers say that the attackers take a slightly different approach to the standard ‘fake login’ phishing email.More
Story image
Kaspersky finds red tape biggest barrier against cybersecurity initiatives
The most common obstacles that inhibit or delay the implementation of industrial cybersecurity projects include the inability to stop production (34%), and bureaucratic steps, such as a lengthy approval process (31%) and having too many decision-makers (23%). More
Link image
DevOps teams struggling to achieve enterprise scale - tips for enablement
Christian Oestreich, a senior software engineering leader with experience at multiple Fortune 500 companies, shares how a metrics-driven mindset can dramatically improve software quality and enable DevOps at enterprise scale.More
Story image
OT networks warned of vulnerabilities in CodeMeter software
Manufacturers using the Wibu-Systems CodeMeter third-party licence management solution are being urged to remain vigilant and to urgently update the solution to CodeMeter version 7.10.More
Story image
Metallic adds data management and GDPR compliance
Now GDPR compliant, additions to the portfolio include eDiscovery features and support for Microsoft Hyper-V and Azure Blob and File storage.More
Story image
Check Point acquires Odo Security to bolster remote security offering
The deal will integrate Odo’s remote access software with Check Point’s Inifinity architecture, bolstering the latter company’s remote security capabilities in a time where working and learning from home has become the norm, and looks to largely remain that way in the near future.More