IBM Tivoli Security Operations Manager

The Tivoli Security Operations Manager is a SIEM platform that is designed to improve the effectiveness, efficiency, and visibility of security operations and
information risk management. Tivoli Security Operations Manager can enable the enterprise to automate the following tasks:

• Log aggregation, correlation and analysis
• Recognition, investigation and response to incidents
• Incident tracking and handling
• Enable monitoring and enforcement of policy
• Provide comprehensive reporting for compliance efforts
  

Tivoli Security Operations Manager automates many repetitive andtime-intensive activities that are required for effective security operations. Data mining, historical reporting, self-auditing, and tracking capabilities provide critical information for understanding security trends. Tivoli Security Operations Manager supplies standard and customizable report templates, an automated report scheduler, and export functionality of all graphs and charts. It draws on information that is stored in a security event database to deliver historical reporting and trending on demand.