MegaplanIT's Fully Managed SIEM is a managed security service in which dedicated security engineers handle the deployment, configuration, monitoring, and ongoing optimization of a SIEM solution on behalf of client organizations. The service is powered by Novawatch and operates 24/7/365 out of a Security Operations Center (SOC). Core capabilities include: - Log Collection: Gathering logs from event sources such as servers, switches, routers, operating systems, and firewalls, then forwarding them to security analytics devices for storage and investigation. - Log Retention: Full lifecycle management of log retention technology to support PCI DSS, FISMA, and HIPAA compliance requirements. - Compliance Monitoring: Real-time assessment of adherence to organizational policies and governing procedures to manage compliance risk. - Event & Intelligence Correlation: Correlating events across end-user experience, business processes, application performance, and technology performance to identify root causes. - Intrusion Detection: Monitoring of incoming, outgoing, and internal network traffic using IDS technologies. - File Integrity Monitoring: Tracking all file modifications made by users or digital services. - Incident Response: Following NIST SP 800-61's six phases — Preparation, Detection, Containment, Investigation, Remediation, and Recovery. - Log Management: Continuous monitoring, validation, secure storage, archiving, and retention of system logs. - Security Incident Investigation: Identifying, investigating, and assessing security incidents with involvement of MSSP engineers. The service is positioned as a SOCaaS offering, allowing organizations to offload SIEM operations to MegaplanIT's team while maintaining visibility into their threat landscape.